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ABSTRACT 



A network device with unified management including at 
least one port operable at any one of a plurality of media 
standards, port apparatus coupled to the port(s) that monitors 
and controls the port(s) for each of the media standards, and 
a management system that interfaces the port apparatus to 
manage the port(s) in a unified manner with respect to all of 
the media standards. The management system manages each 
of the ports in a unified manner regardless of the particular 
supported media standards. In one embodiment, the network 
device includes a memory and maintains multiple sets of 
statistical information per port. The port apparatus stores the 
first and second sets of statistics in the memory. The man- 
agement system receives a statistics request and provides a 
unified statistic or a corresponding statistic from either the 
first or the second set of statistics. For port intrusion detec- 
tion and prevention, one or more ports are assigned one or 
more authorized source addresses. The port apparatus dis- 
ables a port for all media standards if an unauthorized source 
address is received at that port. The management system 
ensures that the port is disabled for all media standards. 

25 Claims, 15 Drawing Sheets 
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NETWORK DEVICE WITH UNIFIED one node and re-transmits the data to other nodes attached to 

MANAGEMENT the repeater. Repeaters usually accommodate a plurality of 

nodes, such as 4, 8, 12 or more nodes, and some repeaters 
CROSS-REFERENCE TO RELATED include connectors for linking to other repeaters. Each node 

APPLICATIONS 5 in the network is typically a computer of some type, such as 

Tbe present application is based on U.S. Provisional * ^T^^ Mac k intosh > minicomputer, 

Application Serial No. 60/050,501 entitled "Dual Speed ma n * ame ' °< hkc where the com puter generally 
Stackable Repeater" filed Jun. 23, 1997, which is hereby ^ d , eS * netW °* ^<*™<* (MQ for interfacing the 
incorporated herein by reference in its entirety. n ^ l ° the / e P K eater t0 ™ b \* networking capabilities. A 

io node may also be a passive device that does not transmit, 
FIELD OF THE INVENTION such 35 a P rinter - In lne present disclosure, each node is 

associated with a network device or data terminal equipment 
The present invention relates generally to networks for (DTE), where each node generally refers to any source 
communication, and more particularly to a network device and/or destination of data connected to any network system, 
with unified management for purposes of control and moni- 15 such as a LAN or the like. 

torin S* Presently, there is a trend in network technology towards 

INSCRIPTION OF THF RFI ATFn art internetworking or enterprise networking, that is, intercon- 

DESCRIPTION OF THE RELATED ART necaog networks of different baseb and transmission rates to 

Networks serve the purpose of connecting many different achieve even greater shared access across a larger number of 

electronic devices such as computers, telecommunications 20 network stations. A current approach to attaining this objec- 

devices, printers, file servers etc., so that expensive com- l * ve IS t0 use a 2-port bridge device capable of filtering data 

puting assets may be shared among many users. Such packets between different network segments or domains by 

computing assets include, but are not limited to, data and making simple forward/don't forward decisions on each data 

software including programs, files, local and global packet it receives from any of the segments to which it is 

directories, and databases, and hardware including 25 connected. As is understood in the art, these segments may 

computers, printers, facsimile machines, copiers, mass stor- De provided with a structured wiring architecture such that 

age media, etc., and any combination thereof. a repeater (or, synonymously, a hub) or a multi-station 

Various communication protocols and standards for net- acc f ss unit (MAU) provides a central connection point for 

works have been developed to standardize the way in which OT wirmg the network stalions disposed in that domain, 

data packets are transmitted across the data exchange media 1° a conventional configuration, one of the ports of the 

of the network. For example, Ethernet™, Token Ring™, hub for a domain with one baseband transmission rate is 

Fiber Optic Inter-Repeater Link (FOIRL) and Fiber Distrib- connected to one port of the 2-port bridge device, whereas 

uted Data Interface (FDDI) are some of the commonly a second hub for a second domain with the same or a 

known network media standards. Also, each standard has its 35 different baseband transmission rate is connected to the 

own baseband transmission rate achievable on an applicable otner bridge port. As can be readily appreciated by those 

physical medium. Ethernet™ is a shared-media network skilled in the art, at least three separate devices must be 

architecture defined in the Institute of Electrical and Elec- interconnected, managed, maintained and serviced in order 

ironies Engineers (IEEE) 802.3 standard, and is currently the t0 provide the conventional internetworking solution. Sev- 

most widely used architecture for local-area networks 4Q eraI disadvantages of this arrangement are readily apparent, 

(LANs). Ethernet™ uses both bus and star topologies. The including less reliability, expensive maintenance, and sub- 

lOBase-T is a physical layer standard based on the IEEE optimal usage of form-factor. 

802.3k specification, which is a baseband 802.3-based Accordingly, it should be appreciated that there has arisen 

Ethernet™ network that operates up to 10 Mbps (megabits a need for an internetworking system that can operate with 

per second), and is configured in a star topology. 45 segments of different baseband transmission rates in a single 

Another El heme™ standard has emerged, referred to as integrated device. A device that is capable of switch func- 

Fast Ethernet™ or 100Base-T Ethernet™, which includes | ions at a higher baseband rate is relatively expensive. Also, 

implementations capable of 100 Mbps transmissions speeds if several slower speed devices are connected to a single 

and is defined in IEEE 802.3u. 100Base-T covers three high speed device, such as a server, much of the high speed 

media types, which includes 100Base-T4 using four pairs of 50 switch capability is wasted, resulting in an inefficient design, 

category 3, 4 or 5 unshielded twisted-pair (UTP) wire, and 11 ^ desired to provide a cost effective and efficient network 

another twisted-wire pair scheme referred to as 100Base-TX for enabling communication among data devices operating 

using two pairs of category 5 UTP or shielded twisted-pair al different communication rates. It is further desired to 

(STP) wire. Also, a 100Base-FX scheme is defined for use improve effective management of the network, 

with fiber optic cables. It is noted that the present disclosure 55 

and invention is not limited to any particular communica- SUMMARY OF THE INVENTION 

tions protocol, communication speed, or standard, and may a network device with unified management according to 

be applied to other protocols and mediums. For example, the present invention includes at least one port operable at 

fiber optic and Copper Distributed Data Interface (CDDI) any one of a plurality of media standards, port apparatus 

systems are also contemplated. 60 C0U pled to the port(s) that monitors and controls the port(s) 

In a star configuration, several nodes or computers are for each of the media standards, and a management system 

connected together through a common hub, which is other- that interfaces the port apparatus to manage the port(s) in a 

wise referred to as a repeater in Ethernet™ topologies. A unified manner with respect to all of the media standards. A 

repeater is a hardware device that generally functions at the specific embodiment described herein illustrates the 

physical layer of the Open Systems Interconnection (OSI) 65 lOBaseT and the 100BaseTX Ethernet™ media standards, 

Reference Model to provide a common termination point for which operate at two different transmission rates of 10 

multiple nodes. In particular, a repeater receives data from megabits per second (Mbps) and 100 Mbps, respectively. 
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The present invention contemplates, however, other media prevention. The port apparatus may receive at least one 

standards and transmission rates, such as Token Ring™, authorized address for multiple ports or for a particular port 

FOIRL, FDDl, etc., and any combination thereof. Thus, the from the management system, where the port apparatus 

management system manages each of the ports in a unified disables one or more ports for all of the media standards if 

manner regardless of the particular supported media stan- 5 an address is received at a port that is different from the 

dards. authorized address assigned to that port. In one embodiment, 

A network device with unified management according to the port apparatus includes a first port module that operates 

the present invention is useful for many control and moni- according to a first media standard and a second port module 

toring functions. In one embodiment, the network device that operates according to a second media standard. The first 

includes a memory, where the port apparatus maintains and 1Q port module disables a port for the first media standard if an 

stores in the memory a first set of statistics for each port address is received that is different from an authorized 

when operating according to a first media standard and a address for that port. The first port module then communi- 

second set of statistics when operating according to a second cates to the management system that the port is disabled. The 

media standard. The management system receives a statis- management system controls the second port module to 

tics request and provides at least one corresponding statistic disab i e that ^ mt ^ for the second media standard 

from the first and second sets of statistics. The management Alternatively, the port apparatus first communicates to the 

system is preferably implemented by a processor executing management system after an unauthorized address ^ 

a management agent, where the management agent may reccived wnefe ^ mana t tem contrds both me 

interface a management console of a management platform fi , . A # ■ f . * , * , , . 

or station, for example. The management platform may be fj 81 fl and sc f ad P°" mo ? uies * d * abIe that P° rt for both of 

coupled via a serial port or the like for out-of-band 20 the first and second media standards, 

management, or through a port of the network device for A networ k device with unified management according to 

in-band management. The memory may be implemented as the P resent invention is useful for enabling and disabling 

a register set or the like. ports. The user or system administrator need only disable a 

The present invention is illustrated herein using a repeater P ort once > and tne network device disables that same port for 

embodiment, where the repeater includes a first repeater 25 boln tne and tne second media standards. The network 

module operable at a first transmission rate and a second device may further include a nonvolatile memory coupled to 

repeater module operable at a second transmission rate. The tne management system, where the management system 

repeater preferably includes a plurality of ports, where each stores a value in the nonvolatile memory that indicates that 

port may be coupled to either the first or the second repeater one or more ports are disabled. Upon subsequent power 

module depending upon the speed of a coupled device or 30 cycle, the management system accesses the nonvolatile 

node. Anode operating at the first transmission rate may be memory and controls the port apparatus to disable each 

coupled to a port for a period of time and then another node disabled port for all of the media standards, 

operating at the second transmission rate may be sequen- A network resource system with unified management 

tially coupled to the same port. Therefore, the first and according to the present invention includes a plurality of 

second sets of statistics may both include valid statistics for 35 network resource devices coupled together via a common 

the same port. backplane. In this manner, the network devices are config- 

The statistic provided in response to the request may be ured in a stacked arrangement. Each network resource 
specific to the particular media standard or may be unified. device includes at least one port and port apparatus that 
If the request is unified, then the management system monitors and controls each port for each of a plurality of 
combines statistics from the first and second sets of statistics 40 different media standards. One of the plurality of network 
and provides a unified statistic in response to the statistics resource devices further includes a management agent that 
request. A unified statistic is typically achieved by adding a interfaces with the port apparatus of each of the network 
corresponding statistic from the first and second sets, resource devices to manage the ports in a unified manner 
although other types of combinations are contemplated. The with respect to all of the media standards, 
standard Ethernet™ Repeater Management Information 45 For statistics purposes, each network resource device 
Base (MIB) implemented according to Internet Engineering includes a memory, where the management agent has access 
Task Force (I C IT) Request For Comments (RFC) 1516, for to the memory of each of the other network resource devices 
example, is a database ci" objects including objects associ- via the backplane. The management agent receives a statis- 
ated with certain types of statistics that are desired to be tics request and provides at least one corresponding statistic 
maintained. The standard Etherne™ Repeater MIB, 50 from one of the plurality of network resource devices. In an 
however, was designed for a single set of statistics and does embodiment described herein, each device is a multiple 
not contemplate a single port with multiple media standards segment repeater, where the backplane extends one similar 
or transmission rates. The management agent receives the segment from each device to achieve a single logical net- 
request indicating a statistic from the standard Ethernet™ work domain. A switch or bridge device may be disposed 
Repeater MIB, combines corresponding statistics for both 55 between the first and second repeater segments to enable 
the first and second rates, and provides a unified statistic. communication between the segments. One of the repeater 

The management agent further supports multiple units is a managing repeater and the other units are man- 
databases, at least one of which including an index to specify ageable repeaters, where the managing repeater incorporates 
the particular media standard or transmission rate. For part of the management system. In this manner, the man- 
example, the request may include a rate parameter, where 60 agement system has access to all of the repeater modules of 
the management agent responds with a statistic associated the entire stack. 

with either a first or a second transmission rate. For an A statistics request is sent via a management console or 

Ethernet™ repeater unit supporting both 10 and 100 Mbps, the like, where the request indicates any port of any one of 

a management console may send a statistics request indi- the units in the stack. The request may include a unit 

eating either 10 or 100 Mbps, or a combination of both. 65 parameter indicating one of the devices and a port parameter 

A network device with unified management according to indicating a particular port of the unit. If the request is for 

the present invention is useful for intrusion detection and a unified statistic, the media standard need not be specified 
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and the management agent accesses the corresponding sta- FIG. 4 is a system level block diagram of a managing 

tistics for both the first and second media standards, com- repeater showing the backplane board and the daughter 

bines the statistics and provides a unified statistic. However, board; 

if the request further indicates the media standard then the FIG. 5 is a more detailed exemplary block diagram of a 

management agent provides the corresponding statistic. The 5 managing base ^ and the back ^ lan ; expansion interface 

managing device may include a database with a table of board of the managing repeater of nG j£ 
objects associated with the statistics and an index for indi- cio r • _. „ . 

eating a port, a network resource device and a media . FI P/ ^ amo * detailed exemplary block diagram of a 

standard. The management agent receives the statistics daughter board of the managing repeater of FIG. 1A; 
request, applies the port parameter, the device parameter and 10 FIG * 7 ^ a more detailed exemplary block diagram of a 

the media parameter to the index to identify a corresponding manageable base board and a slave backplane board of a 

object and retrieves at least one corresponding statistic. manageable repeater of FIG. 1A; 

For intrusion detection and prevention, the port apparatus FIG 8 ^ a more detailed exemplary block diagram of an 

of each network resource device receives at least one autho- unmanaged daughter board of a manageable repeater of FIG. 
rized address for one or more of its corresponding ports from 15 

the management system, and disables a port for all of the FIG. 9 is a more detailed and exemplary block diagram of 

media standards if an address is received at that port that is the MIC of FIGS. 5-8; 

different from the authorized address. In one embodiment, FIG. 10 is a more detailed block diagram of the manage- 

each port apparatus includes a first port module that operates ment engine of FIG. 6; 

according to a first media standard and a second port module 20 FIG. 11 is a block diagram of an exemplary management 

that operates according to a second media standard. The first engine controller used in the management engine of FIG 10* 
port module disables a corresponding port for the first media cm 1 -> c . ■ r *i_ t_ • , T <•* . * 

standard if an address is received atlhe port that is different J^^^ ?*" ° f the 

from the authorized address and communicates disablement ° f *? G " ^ , 

to the management system. The management system con- 25 a block dia S ram of the managing repeater of 

trols the corresponding second port module to disable the 1A wustrating a management agent, a management 

port for the second media standard. In an alternative buS ' mana S ement databases and other management func 

embodiment, the first port module communicates to the tlons » ancl 

management system if and when an unauthorized address is . ^ ^ 3 block diagram of the adaptive repeater 

received, where the management system controls both the 30 interface controller modules shown in FIGS. 5-8. 
first and second port modules of the port to disable that port dftatt en ncQf^u tdtthm nc tuc 

for both of the first and second rcedia standards. DE SS£SSSSSS5S? HE 

Accordingly, it should be appreciated that a system 
according to the present invention provides an internetwork- Referring now to FIG. 1A, a simplified block diagram is 

ing system that operates with segments of different media 35 shown of a network system 100 including a plurality of 

standards and/or transmission rates in a single integrated network devices implemented according to the present 

device. The present invention provides a cost effective and invention coupled together in a managed stack configura- 

efincient network for enabling communication among data tion " ^ network devices are multiple port repeaters 102, 
devices operating according to different media standards or 106 ' 108 and 110 physically and logically coupled 

at different communication rates. A network device accord- 40 to g etner across a common backplane bus 112. Each of the 

ing to the present invention enables efficient utilization of a repeaters 102-110 includes a first segment 102a, 104a, 

higher speed segment while enabling communication among 106fl > 108a and 110a » respectively, and a second segment 

slower devices coupled via one or more slower segments. 102 ^' 104fr » 1086 and 11<w> » respectively. The first 

Further, the present invention provides a system and method segments 102a-110a operate at a first transmission rate and 

for effective and unified management of any and all units in 45 the second segments 1026-1106 operate at a second trans- 

a stacked configuration. mission rate. 

In the embodiment shown, the first segments 102a-110a 

BRIEF DESCRIPTION OF THE DRAWINGS are Ethernet™ 10 Mbps repeater segments operating accord- 

A better understanding of the present invention can be ing the Etherne t™ lOBase-T standard. The 10 Mbps 
obtained when the following detailed description of the 50 re P eater mnction is optionally lOBase-T compliant support- 
preferred embodinent is considered in conjunction with the in S U P t0 four re Peater hops. The second segments 
following drawings, in which* 1026-1106 are Ethernet™ 100 Mbps repeater segments each 
' FIG. lAis a simplified block diagram of a network system ^ a ^g according to <^™* t " 100Base-TX standard, 
including a plurality of network devices implemented „ * ach ° f ^ 1°^°* "»»P"^th€r v U 
according to the present invention coupled together in a 55 £««™bad*^ 

managed stack configuration; toe backplane bus 112 includes a repeater portion 112a (FIG. 

CTr , ID • rfi . ... , . . 13) and a management portion 1126. In the embodiment 

HG. IB is a simplified diagram illustrating several nodes, shown the T ^ mQ f ^ common 

such as computer systems or the like, coupled to the network 5us m indudes a ^ st Ethernet rM component that ope P rates 

system 01 mo, ia; 60 a( a lransmission rate of 100 MbpS) where the 1(X) Mbps 

FIG. 2 is a flowchart diagram illustrating exemplary repealer function is preferably according to 100Base-TX 

scenarios of transmitting information in a network arrange- Class I. The present invention, however, is not limited to any 

ment provided in accordance with the teachings of the particular protocol or transmission rate or class and contem- 

presenl invention; plates a plurality of different protocols and transmission 

FIG. 3 is a perspective diagram of the network system of 65 rates. For example, the slower segments 102a-110a may 

FIG. 1A illustrating exemplary physical connections of a operate at 100 Mbps while the faster segments 1026-1106 

managed stack configuration; and the repeater portion 112a of the backplane bus 112 
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operate al a transmission rate of one gigabit per second otherwise called a hardware or physical address which is an 

(Gbps). Further, a configuration with more than two seg- industry-wide unique address identifier including six (6\ 

ments per unit is contemplated and the backplane may be bytes. The management agent 1302, which manaees the 

disposed between any corresponding segments. entire managed stack configuration, is accessible via the 
Segmentation is the process of isolating or coupling an 5 using single MAC address. Also, at the higher level network 

individual segment from/to a common collision domain. layer, a single local Internet Protocol (IP) address (32-bit for 

Each of the switch devices 102c-110c may be separately version 4, 128-bit for version 6) or network address may be 

disabled, so that any one or more of the segments 102fl-110a used for all segments of the stack as part of a single logical 

SgLnn2 Cp,r,te r T '!? , c ° rres P ondin | "Wn«l LAN rather than having .0 assign separate addresses fo 

bus 112 and thus from the common collision domain^ convenient LAN configuraUon. In this manner, devices 

Each of the repeaters 102-110 fiirther includes a two-port C ° UP ^ * *° y ° f ^ f 0 ^ -° f Kp ™ tQTS 102-110 

learning bridge or switch device 102c, 104c, 106c, 108c and 15 P art ° f / h f ^ lo S lcal domain or LAN. Thus, in the 

110c, respectively. Each switch device 102c-110c is coupled mana 8 ed f** configuration using the backplane bus 112, 

to a corresponding segment 102a-110a, respectively, and to the network -devices coupled to any of the repeaters 102-110 

a corresponding segment 1026-1106, respectively, within are part or tbe lo S lcal d °main or LAN via the common 

the repeaters 102-110, respectively, as shown in FIG. 1A. backplane bus 112. 

The segments 1026-1106 are incorporated into the same 20 In tne managed stack configuration shown in FIG. 1A, a 

repeater or collision domain via the repeater portion 112a of network management station or platform 116 is coupled to 

the backplane bus 112. Each of the segments 102a-110a are any one of the ports of the repeaters 102-110 for "in-band" 

in separate collision domains, which thereby reduces the management. The managing repeater 102 also includes a 

number of collisions on each of the segments 102a-U0a serial port 114 that couples to and interfaces with the 

and the segments 1026-1106 including the repeater portion 25 management platform 116 for various purposes including 

112a. Nonetheless, as further described below, the switch "out-of-band" management. The management platform 116 

devices 102c-110c enable communication and data transfer is able to manage the entire network system 100 via the 

between each of the s^ments 102a-110a and the corre- management agent 1302 of the managing repeater 102. The 

sponding segments 102W106, respectively. In this manner, management platform 116 may be as simple as a Manage 

30 ment Information Base (MIB) browser for acceLmg MIB 
102a-110a may communicate wnh any, device on. any other objects of one or more ^ / d ^ fa 

segmentofanyofthere P eatersl02 104, 106, 108 and 110. 102 -110. THe management platform 116 may be' mo^e 
The sucked configuration with mu hple segments is trans- sophisticated, such «? a management console ninning an 
parent to each network device SNMp ^ j Network MaQ * ? ^ 

t^ZT^ I ' i 50 ™* mrk deV1Ce a PP ears 35 management application using SNMP over IP o over IPX 
An 1 f C r C 8 r ^*nn • Li (Internetwork Packet Exchange). THe SNMP manager^ 

Any one of the repeaters 102-110 is operable as a application submits management requests, such as enable/ 
standa one unit. Any two of the manageable repeaters disable ports, backup port assignments, trap table entries, 
104-110 may be coupled together with a one-to-one physi- statistics, etc. to a SNMP management agent 1302 within a 
cal backplane connection in an umnanaged stack 40 management module within the managing repeater 102 The 
configuration resulting in one repeater domain with one repeater 102 also preferably supports a VT100 terninal 
repeater hop. For example, the repeaters 104 and 106 may be emulation interface via the serial port 114 for supporting 
coupled together in an unmanaged stack configuration. The basic management and configuration functions For SNMP 
respective segments 104« and 106. r are interconnected via out-of-band management using the management platform 
nT , T! I 106c and the segments 104fe and 45 U6 via the serial port 114, a Serial Line Internet Protocol 
066 via the backplane bus 112, where the switch devices (SLIP) or Point-to-Point Protocol (PPP) is established for 
l^A I J C{ St ° re and 1 f oi r ard d t v lces with modified exchanging packets between the managing repeater 102 and 
MAC (media access control) address filtering. , he management platform 116 via the serial interface The 

In the embodiment shown, the network system 100 is a serial port 114 also enables remote terminal emulation or 
managed stack configuration, in which one of the repeaters, 50 management using a modem 

such as the repeater 102 is a managing unit and the nG. IB is an exemplary diagram illustrating several 
remaining repeaters 104-110 are manageable units. All of nodes NODE 1, NODE 2, NODE 3 NODE 4 NODE 5 and 
the ports of the repeaters 102-110 have access to a man- NODE 6, such as computer systems or the like, coupled to 
agement agent 1302 (FIG. 13) implemented within the the network system 100. In particular, nodes NODE 1 and 
managing repeater 102 regardless of connection speed as 55 NODE 2 are each coupled to the segment 1026 of the 
long as they have access to the management portion 1126 of repeater 102, NODE 3 is coupled to the segment 1046 of the 
the common backplane bus 112. The ports of the segment repeater 104, NODE 4 and NODE 5 are each coupled to the 
1026 always have access to the management agent 1302 of segm ent 102a of repeater 102 and NODE 6 is coupled to the 
the managing repeater 102. However, if any of the switch segment 104a of repeater 104. Communication between 
devices 102c-110c is disabled, the corresponding segments 6 o each of the nodes occurs using Etherne™ packets each 
102a-110a, respectively, lose their access to the manage- including source and destination MAC addresses Packets 
ment agent 1302. Of course, when any of the manageable may be unicast, multicast or broadcast. For broadcast 
repeaters 104-110 is disconnected from the repeater portion packets, the "destination" address indicates that the packet 
112a, the ports of the disconnected manageable repealer lose should be broadcast to every other device or to multiple 
access to the management agent 1302. 65 dev ices. Unicast packets include a destination MAC address 

As described firmer below, the managing repeater 102 is identifying a particular node or network device for which the 
assigned a single Media Access Control (MAC) address, packet is intended. A packet transmitted by NODE 1 to 
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I* Mnn^ r T Ve ? aDd lheD n *^*y the segment 1026 teachings of the present invention. FIG. 2 illustrates tans- 

L° ?« E ™ ° hC repeatCr P TL° n 112(1 ° f '^Mane fitting information from a network station Dl to a receiving 

. P u° u Ct 15 reCe u ed a ^%}Jf? 0f me network station D2 within a multi-segmented network hav- 

repeater 104, which repeats the packet to NODE 3. NODE ing a managed stack such as, for example, the manZd sUck 

3 may respond with a packet of its own which is received 5 network system 100 shown in FIGS. 1A and IB. As can be 

nlThl'h I ™ l °L f ■ repeatef J? 1 *?" a PP feciated b y *™ in the art, the network stations 

112a of the backplane bus 112. T^e packet is received by the Dl and D2 may be disposed in two different domains 

S&£ 2 !f th"? MS" l ° b ° th r h ° deS N0DE 1 f nd ° PCrating ° n different ba ^ baDd si S nal -g specificaS 
Mnnn h N0D F 1 u eCC1V ? lh , e . res P° nse P ackel - Thus, it should be understood that blsed on different com- 

^ MnnpT y lgn ° re ° r ° P ^ U 15 addreSSCd io binations several scena "os for communication signal flow 

10 INUUb I may occur For examplC) D1 may be coupled tQ a slQwer 

In the embodiment shown, the switch devices 102c-110c segment, such as, for example, the first segment 102a of the 

learn the MAC addresses of devices coupled to ports that are multiple port repeater 102 shown in FIG. 1A, whereas D2 

connected to the first segments 102a-110a, respectively. The may be coupled to a faster segment, such as for example the 

switch devices 102c-110c, however, do not learn the MAC 15 second segment 1086 of the multiple port repeater 108 ' On 

addresses of devices coupled to ports that are connected the the other hand, Dl may be coupled to a faster segment while 

second segments 1026-1106, respectively. In alternative D2 is coupled to a slower segment. Moreover, Dl and D2 

embodiments, the switch devices 102c-110c are configured may be attached to segments of the same unit or to segments 

to learn the MAC addresses of devices coupled to both the of different units in the stack. Accordingly, it should be 

first and second segments 102a-110a and 1026-1106. In the 2Q appreciated that the flow diagram provided in FIG. 2 iUus- 

embodiment shown, the switch device 102c learns the MAC trates an exemplary methodology for signal flow in the 

addresses for NODE 4 and NODE 5, and the switch device various alternative scenarios rather than a sequential flow of 

104c learns the MAC address for NODE 6. The switch a series of decision steps. 

devices 102c-110c forward packets from a respective sec- A network transmission is initiated from Dl and it is 

ond segment 1026-1106 to a respective first segment 25 presumed that D2 is the intended receiver. A first transmis- 

102a-110a only if the packet includes a destination address sion scenario 120 illustrates the situation when both Dl and 

that matches a learned MAC address, and thus only if D2 are connected to the same repeater unit and are disposed 

1 n^ 1 nn g A f I 7 ^ i S P< S« % fitSt J* gment 0n the ™ mc network In this case * transmission 

102a-110a. The switch devices 102c-110c forward packets is made from Dl to D2 as shown at step 121 without 

from a respective first segment 102a-110a to a respective 30 bridging via a switching device, which transmission may be 

second segment 102^1106 only if the packet includes a made according to a suitable communications standard that 

destination address that does not match any of its learned is used for the network segment. In scenario 130 both Dl 

MAC addresses, and thus only if not identifying any device and D2 are attached to the same unit but are disposed on two 

on the respective first segment 102a-110a. different segments. That is, if Dl is on a fast segment, D2 is 

For example, if the packet transmitted by NODE 1 35 on the slow segment and vice versa. In this case the 

included a destination address that identified the MAC integrated switching fimctionality of the repeater unit, such 

address of NODE 5, then the switch device 102c forwards as performed by any one of the switching devices 

the packet to the segment 102a, which repeats the packet to 102c-110c, is utilized as shown at step 131 to effectuate the 

nodes NODE 4 and NODE 5. The same packet is also data transmission from Dl to D2 at step 132. 

received by the switch device 104c, but ignored and not sent 40 Continuing to refer to FIG. 2, scenarios 140 150 and 160 

to the segment 104a since the switch device 104c does not describe situations wherein Dl and D2 are connected to 

learn nodes of a separate segment. If a packet sent by NODE different units of the network system 100. When both Dl and 

3 included a destination address for NODE 1, then both of D2 are disposed on a fast segment as in scenario 140 the 

the switch devices 102c and 104c filter the packet, so that the transmitting unit places the data on the repeater portion 112a 

packet is not repeated on the first segments 102a and 104a. 45 of the backplane bus 112 at step 141 which is received by the 

Local traffic on the first segments 102a-110a is filtered by receiving unit to which D2 is attached D2 receives the 

the respective switch devices 102c-110c. Thus, a packet sent transmitted information at step 132 without any need for 

by NODE 4 with a destination MAC address identifying intermediate bridging 

NODE 5 is filtered by the switch device 102c and not When Dl and D2 are disposed on different segments of 
asserted on the corresponding second segment 1026. Thus, 50 different units as illustrated by scenario 150, the location for 
local first segment traffic is not repeated on the collision bridging would be based on whether the sending network 
domain of the second segment, thereby reducing traffic and station Dl is on a slow segment or fast segment as is 
collisions on the second segments 102W106 and the indicate d at decision step 15LIf Dl is on SeX^m 
repeater portion 112a of the backplane bus 112. then the information fc b P ridged to the fast ^ g^J 

Network devices or nodes on separate first segments may 55 in the unit to which Dl is attached at step 152 and the 
communicate. Thus, a packet sent by NODE 4 with a information then placed on the repeater portion 112a of the 
destination MAC address identifying NODE 6 is transmitted backplane bus 112 at step 153. The information is then 
by the switch device 102c to the second segment 1026 since received by D2 which is on the fast segment at step 164 On 
the destination address was not known by the switch device the other hand, if Dl is on the fast segment as determined at 
102c, The second segment 1026 repeats the packet to the 60 step 151, the information is placed on the repeater portion 
segment 1046 of the repeater 104 via the repeater portion 112a of the backplane bus 112 directly at step 154 and 
112a of the backplane bus 112. The switch device 104c received and bridged at the receiving unit at step 155 where 
recognizes the learned address for NODE 6, and sends the the information subsequently transmitted to the slow see- 
packet to NODE 6 via the first segment 104a. men t to D2 at step 164. 

Referring now to FIG. 2, a flowchart diagram is shown 65 When Dl and D2 are on separate slow segments the 
illustrating exemplary scenarios of transmitting information information needs to be bridged in the transmitting unit at 
in a network arrangement provided in accordance with the step 161, and transmitted via the repeater portion 112a of the 
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backplane bus 112 at step 162. Once the information is FIG. 5 is a more detailed block diagram of the managing 

received at the receiving unit, it is bridged onto the slow base board 312 and the backplane expansion interface board 

segment (step 163) and repeated to the destination station 302 of the managing repeater 102. The managing base board 

D2 at step 164. 312 includes 12 Ethernet™ ports individually labeled PORT 

It is appreciated by those skilled in the art that if a separate 5 1-PORT 12. Each of the ports PORT 1-PORT 12 includes 

slow backplane, comparable to the fast backplane, is pro- a port connector 502 such as an RJ-45 socket for receiving 

vided interconnecting the slow segments of the units, then a compatible RJ-45 plug with a twisted-pair cable for 

arbitration capability may be incorporated to direct traffic coupling to a network device. Each port connector 502 is 

from a slow Dl to a slow D2 either via the bridge- coupled to a physical layer circuit 504 containing an inte- 

backplane -bridge path or via the direct slow backplane. 10 grated PHY device and associated magnetic module 

However, providing additional cabling for the stackable (isolation transformer and common mode coil, etc.) for 

slow backplane and arbitration capability may increase isolation and electromagnetic interference (EMI) reduction, 

system complexity and inefficiency associated therewith. Eacn physical layer circuit 504 is preferably an ICS 1890 

Referring now to FIG. 3, a perspective diagram of the dual speed device or the nkc which supports both 10 and 100 

network system 100 is shown illustrating the physical con- k f^ ps ^SMA/CD (Carrier Sense Multiple Access with Col- 

nections of a managed stack configuration. The managing 1S10n Detectl °° (-Ethernet™ applications. Each physical 

repeater 102 includes a backplane expansion interface board A.^nn^h", T* T. ^ Ti- - ip ^ to ; ne g° tiation 

302 that further includes four backplane connectors 304. JvS ™le d ^.t^nH H -T* 511111 ^ °f ^ TT* 

Each of the manageable repeaters 104-110 includes a single ^STJ^T h ^ ^ 

L n/>1/rtUna if\A r? u e c ,1 -.^ performance common operating mode. The physical layer 

backplane connector 304^ Each one of four cables 306 20 circuit 504 ferabl * ' £ ^ I£E£ / 

having appropriate and compatible conductors and Independent Interface (Mil) for connection to MACs or 
connectors, is connected between a corresponding one of the repeaters, and also implements a 10 Mbps serial bit stream 
four connectors 304 of the managing repeater 102 and the interface. Each of three Adaptive Repeater Interface Con- 
connector 304 of one of the manageable repeaters 104-110. trailer (ARIC) modules 506 is coupled to and controls four 
In this manner, the backplane bus 112 is logically a single 25 of the physical layer circuits 504. The physical layer circuits 
bus but is physically implemented in a star configuration, 504 are also configured and controlled via an Media Inde- 
where each of the manageable repeaters 104-110 are con- pendent Interface (Mil) management data serial bus (MDIO) 
nected directly to the managing repeater 102, allowing for bus 508, which is further coupled to a management interface 
up to five stacked units in the embodiment shown. controller (MIC) 510, further described below. 
Preferably, each of the connectors 304 are female 68-pin 30 Each of the ARIC modules 506 is coupled to a 10 Mbps 
SCSI (Small Computer System Interface) II D-type connec- repeater module 512 and a 100 Mbps repeater module 514 
tors. Each of the cables 306 are preferably 68-conductor via appropriate transmit (TX) and receive (RX) BUS signals 
shielded flat ribbon cables with male 68-pin SCSI II D-type to provide a connection between the physical layer circuits 
connectors. Of course, any suitable cable and connector 504 and either of the 10 or 100 Mbps repeater modules 512 
configuration may be used. Also, although only five repeat- 35 514. Each ARIC module 506 monitors link status and 
ers are shown in the stacked configuration, it is understood connection speed from its physical layer circuits 504 and 
that the present invention is not limited to any particular routes packet data to the appropriate repeater module At 100 
number of units in the stack. The repeater portion 112a and Mbps, the TX BUS and the RX BUS establish a 13-port Mil 
the management portion 112/? of the backplane bus 112 are link to enable communication between the coupled network 
both included in each of the connectors 304 and cables 306. 40 device and the 100 Mbps repeater module 514. The Mil link 
The backplane board 302 is connected via a suitable handles 13 ports, one each for the ports PORT 1-PORT 12 
backplane board connector 310 to a managing base board and an additional uplink port 503 for the optional SUM 402 
312 within the managing repeater 102. The managing base so that the optional SUM 402 is coupled via a 100 Mbps Mil 
board 312 preferably incorporates 12 auto-negotiating link to the repeater module 514. At 10 Mbps, a serial bit 
10/100 Ethernet™ ports as further described below. The 45 stream interface via corresponding Pseudo Attachment Unit 
managing base board 312 further includes a daughter board Interface (PAUI) ports are used to enable communication 
connector 314 for receiving and connecting a daughter board between each ARIC module 506 the 10 Mbps repeater 
316, which also preferably incorporates another 12 auto- module 512. 

negotiating 10/100 Ethernet™ por ts for a total of 24 ports. Each ARIC module 506 is preferably a Field Program- 
Each of the manageable repeaters 104-110 include similar 50 mable Gate Array (FPGA) design that translates 10 Mbps 
logic and are implemented in a similar manner as the Non-Retum-To-Zero (NRZ) data from a physical layer cir- 
managing repeater 102, except that the manageable repeat- cuit 504 to Manchester data for PAUI ports, and vice-versa, 
ers 104-110 do not include the sophisticated management Each ARIC module 506 multiplexes the RX BUS to elimi- 
a 8 ent - nate the need for external tri-state buffers, and demultiplexes 
FIG. 4 is a system level block diagram of the managing 55 the 100 Mbps TX BUS from the repeater module 514 to four 
repeater 102 showing the backplane board 302 and the of the physical layer circuits 504. Each ARIC module 506 
daughter board 316 coupled to the managing base board 312. provides a connection between four of the physical layer 
Also shown is a Smart Uplink Module (SUM) 402 and a circuits 504 and the respective four ports of each of the 
power supply 404 coupled to the managing base board 312. repeater modules 512, 514. 10 Mbps network devices are 
The optional SUM 402 implements an uplink port that plugs 60 coupled to the 10 Mbps repeater segment of the 10 Mbps 
into the base board 312 to enable extension of the topology repeater module 512 and 100 Mbps network devices are 
of the 100 Mbps Class I fast segment beyond the standard coupled to the 100 Mbps repeater segment of the 100 Mbps 
200 meter diameter restriction. The connection is preferably repeater module 514 regardless of which of the ports PORT 
accomplished using a 50-pin connector, and the uplink 1-PORT 12 that the network device is connected to. The 
connection is either a 100Base-TX or 100Base-FX port, 65 repeater module 512 is preferably an IMR2 by Advanced 
although other types of port connections arc possible and Micro Devices, Inc. (AMD). The repeater module 514 is 
contemplated. preferably the BCM5012 by Broadcom Corporation. 
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In general, an Mil link includes a bundle of four transmit link detector block 1404 receives four SPEED signals 

data'signals TXD<3:0>, a bundle of four receive data signals SPEED 1-4 and four link status signals LSTA1-4 from four 

RXD<3:0>, a transmit clock signal TX_CLK, a receive associated physical layer circuits 504 and generates four 

clock signal RX_CLK, a transmit enable signal TX_EN, a corresponding 10 Mbps slow link signals SLNK1-4, four 
transmit coding error signal TX_ER, a receive data valid 5 corresponding 100 Mbps fast link signals FLNK1-4 and 

signal RX_DV, a receive error signal RX_ER, a repeater four corresponding link signals LINKl-4. The LINK1-4 

collision signal COL and a carrier sense signal CRS. In the signals are coupled to a corresponding four of the 12 LINK 

embodiment shown, each physical layer circuit 504 auto- pins of the repeater module 514. The LINKl-4 signals each 

negotiates with a coupled network node device via a corre- correspond to a corresponding one of either the SLNK1-4 
sponding port connector 502, asserts a respective SPEED 10 signals or the FLNK1-4 signals depending upon the corre - 

signal to indicate either 10 Mbps or 100 Mbps transmission sponding SPEED signal. The SLNK1-4 and FLNK1-4 

rate and then operates at the indicated transmission rate. signals are used for purposes of multiplexing the receive 

Each physical layer circuit 504 includes an Mil-type inter- paths and demultiplexing the transmit paths, which is further 

face to one ARIC module 506 for both 10 and 100 Mbps described below. 

operation. For the 100 Mbps case, the corresponding SPEED 15 Each of four port carrier sense signals PCRSl^ from 

signal indicates 100 Mbps and the Mil interface operates in respective physical layer circuits 504 are logically ANDed 

a normal manner. For the 10 Mbps case, the corresponding together within each ARIC module 506 with a correspond- 

SPEED signal indicates 10 Mbps and the MH interface is ing one of the FLNK1-4 signals with respective 2-input 

operated in a serial bit stream mode in the NRZ format using AND logic gates 1406, which provide a corresponding four 
only the RXD<0> and TXD<0> signals for data. Also, the 20 repeater carrier sense signals RCRS1-4. In this manner, each 

RX_CLK and TX_CLK signals are both operated at 10 carrier sense signal PCRS from the corresponding physical 

MHz for the 10 Mbps case. Each ARIC module 506 includes layer circuit 504 is provided to the repeater module 514 in 

four Mil-type ports for both 10 and 100 Mbps operation, the form of a corresponding RCRS signal only if the port is 

where each couples to an Mil interface of a corresponding 100 Mbps. The corresponding link signal LINK is provided 
one of the physical layer circuits 504. 2$ to the repeater module 514 regardless of port speed. The 

In the embodiment shown, the repeater module 514 physical layer circuits 504 are configured to clock transmit 

handles 13 Mil ports, but s includes only a single Mil data data with a clocking signal REF_JN. The CLK25 signal 

port with a single set of RXD<3:0> and TXD<3:0> data from the clock circuitry is provided to the input of a buffer 

pins, one TX_ER pin, one RX_DV pin, one RX_ER, one 1418, which provides the REF_IN signal at its output. The 
RX_CLK pin and one TX_CLK pin. The repeater module 30 REF_IN signal minimizes delay skew between the transmit 

514 includes 13 CRS pins, 13 COL pins, 13 LINK pins, 13 clock CLK25 and the transmit data signals TXD<3:0>. 
TX_EN pins and 13 port enable PORTEN pins and inter- The TXD<3:0> and TX__EN signals of the TX BUS are 

faces one port at a time. Each ARIC module 506 includes a provided to the corresponding TXD<3:0> and TX_EN pins 

single Mil data port with a single set of RXD<3:0> and of the ARIC module 506, which are coupled to an input of 
TXD<3:0> data pins, which are coupled to the respective 35 a l-to-4 demultiplexer (DEMUX) 1408. The four TX_EN 

pins of the Mil port of the repeater module 514 via the RX sigpals and corresponding FLNK1-4 signals are used to 

BUS and the TX BUS, respectively. Each ARIC module 506 control the select inputs of the DEMUX 1408 to select one 

further includes four LINK pins and four CRS pins, which of four transmit paths 1408a, 14086, 1408c and 14Q$d when 

are coupled to four of the 12 LINK and CRS pins of the the corresponding TX_EN signal is asserted. The transmit 

repeater module 514. Each ARIC module 506 includes four 40 paths I4&%a-~d are provided to respective inputs of four 

PORTEN input pins which are coupled to a corresponding 2-to-l MUXs 1410, 1412, 1414 and 1416, respectively, 

four of the 12 PORTEN signals of the repeater module 514. which have respective outputs that provide TXD<3:0> and 

In the embodiment shown, the repeater module 512 TX„EN signals, collectively shown as the TXP0RT1-4 

includes 12 Pseudo Attachment Unit Interface (PAUI) ports signals, respectively, to the associated four physical layer 

that operate using Manchester encoded data. Each PAUI port 45 circuits 504 handled by the particular ARIC module 506. 

includes a pseudo AUI data output (PDO) signal, a pseudo The select inputs of the MUXs 1410-1416 are controlled by 

AUI receive data input (PDI) signal and a pseudo AUI the respective SLNK1-4 signals to select the 100 Mbps 

collision input (PCI) signal. Each ARIC module 506 transmission paths X4Q8a-d or corresponding 10 Mbps 

includes four PDO 1-4, PDI 1-4 and PCI 1-4 pins that carry transmission paths, described below, 
the respective PDOl-1, PDI1-4 and PCU-4 signals that are 50 The RXD<3:0>, RX_DV and RX_CLK signals of four 

provided to corresponding PDOl^, PDM^t and PCIl-^ of physical layer circuits 504, collectively referred to as 

pins of the repeater module 512 for interfacing a respective RXPORTl^ signals, are provided to four respective inputs 

four of the ports of the repeater 102. of a 4-to-l MUX 1420, which provides a selected set of 

FIG. 14 is a block diagram of each of the ARIC modules RXPORT signals, called RXPORT100, to the inputs of a set 

506. Within each ARIC module 506, a clock divider circuit 55 of tri-state buffers 1422. Note that four RX_DVl-4 and 

1402 receives and synchronizes a system reset signal RST RX_CLK1^ signals are provided, one for each of the four 

and provides a synchronized reset signal RESET The ports. Four port enable signals PRTEN1-4 of the corre - 

repeaters 102-110 each include clock circuitry (not shown) sponding PRTEN pins of the ARIC module 506 are provided 

for generating a 20 MHz clock signal CLK20 and a 25 MHz to the select inputs of the MUX 1420 to select one of the four 

clock signal CLK25. The CLK20 signal of the repeater 102 60 ports. The PRTENl^l signals are effectively ORed together 

is provided to the clock divider circuit 1402, which gener- so that any one asserted enables the buffers 1422 to drive the 

ates a 10 MHz clock signal CLK10 and a 5 MHz clock signal selected port signals RXPORT100 as the RXD<3:0>, 

CLK5 from the CLK20 signal. Each of the physical layer RX_DV and RX_CLK signals of the RX BUS to the 

circuits 504 auto-negotiates the speed of a device or node repeater module 514. 

coupled to a corresponding port and generates a correspond- 65 Since the repeater module 512 transmits data on PDO 1-4 

ing SPEED signal indicating the transmission rate of the signals simultaneously, only one 10 Mbps Manchester 

coupled device and a link status signal LSTA. A speed and decoder 1424 is required for four ports. The Manchester 
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decoder 1424 receives the CLK20 signal and four PDOl-4 
signals for four ports, monitors for signal transitions of the 
combined PDOl-4 signals and aligns data bit-symbols to 
convert Manchester format to NRZ format. Each bit symbol 
is split into two halves with the first half containing the 
logical complement of the bit value and the second half 
containing the true bit value. The true bit values are provided 
to the input of a 7x2 (7 bits deep by 2 bits wide) configured 
TX first-in, first-out buffers (FIFOs) 1426, where each of 
seven data bits includes a valid flag bit. It is noted that only 
one TX FIFO 1426 is provided for the four ports. When the 
Manchester decoder 1424 detects data being transmitted by 
the repeater module 512 for any of the four ports, it indicates 
to the TX FIFO 1426 to receive data. The TX FIFO 1426 sets 
the corresponding valid flags for each valid bit, and the 
Manchester decoder 1424 signals the last valid data bit. 

When the physical layer devices 504 operate in 10 Mbps 
mode, they clock the transmit data with their TX_CLK 
signal. Therefore, four 10 Mbps TX serializers 1428 are 
provided. Each of the four 10 Mbps TX serializers 1428 
receives the output data of the TX FIFOs 1426 and a 
corresponding one of the four transmit clock signals 
TX__CLKl-4 from respective physical layer devices 504. 
The output of each of the four TX serializers 1428 is rovided 
to the other input of a respective one of the MUXs 
1410-1416 for the respective orts. When the TX serializer 
1428 detects valid data in the TX FIFO 1426 and a corre- 
sponding PDOl-4 signal is active, it provides corresponding 
TXD<3:0> data and TX_EN signals of TXPORT1-4 to the 
corresponding physical layer circuit 504 via the correspond- 
ing one of the MUXs 1410-1416. The TX_EN signals are 
generated by a corresponding TX serializer 1428 based on 
the valid flag bits, where the TX_EN signals remain 
asserted for each valid data bit. The TX serializer 1428 
cycles through the TX FIFO 1426 and clocks data to the 
corresponding physical layer device 504 for each data that 
has its valid flag bit set. The respective 10 MHz TX_CLK 
signals provided from the physical layer devices 504 are 
used to clock the data into respective physical layer circuits 
504. The TX serializer 1428 completes the transmission 
process when it detects an invalid flag, where it then 
deasserts a respective TX_EN signal. 

One bit of data is written to the TX FIFO 1426 for every 
two cycles of the CLK20 signal. One bit of data is written 
by a TX serializer 1428 for every clock cycle of the 
corresponding TX_CLKl-4 signal provided by the corre- 
sponding physical layer circuit 504. Ideally, if the CLK20 
and TX__CLKl-4 signals were synchronized and did not 
vary with respect to each other, only one data bit would be 
needed in the TX FIFO 1426. However, the CLK20 and 
TX_CLKl-4 signals are not necessarily in phase and 
further may have frequencies that vary with respect to each 
other in the embodiment shown. A 10 Mbps data rate 
represents a bit rate of approximately 100 nanoseconds (ns). 
Ethernet packets have a maximum of 1,518 bytes or 12,144 
bits. Given the variation between the two clock signals, the 
Manchester decoder 1424 and the TX serializer 1428 may 
vary by 1-2 bits with respect to each other for a given 
packet. The TX serializer 1428 waits for at least 3-4 bits 
written to the TX FIFO 1426 by the Manchester decoder 
1424 before pulling data from the TX FIFO 1426 to ensure 
that data is not lost. The TX FIFO 1426, therefore, is seven 
data bits deep to ensure that data is not lost if either side is 
faster or slower by 1-2 bits than the other side. 

The four sets of RXPORT1-4 signals are provided to 
respective inputs of a 4-to-l MUX 1430, which provides a 
selected set of RXPORT signals, shown as RXPORT10, to 



16 



20 



25 



30 



35 



45 



50 



60 



65 



the input of a 6x2 (6 bits deep by 2 bits wide) configured RX 
FIFO 1432. The 6x2 configuration includes a valid flag bit 
for each data bit in a similar manner as described above for 
the TX FIFO 1426. The select input of the MUX 1430 is 
controlled by the SLNK and PCRS signals to select the 
active port. As soon as a respective RX_DVl-4 signal is 
detected by the RX FIFO 1432 from the MUX 1430, the RX 
FIFO 1432 writes the RXD<0> data using the falling edge 
of the corresponding 10 MHz RX__CLK to ensure proper 
setup and hold times. The RX FIFO 1432 sets a correspond- 
ing valid flag bit for each valid data bit in a similar manner 
as described above for the TX FIFO 1426. Once the first data 
bit is written into the RX FIFO 1432, it sets the valid flag bit 
to notify a 10 Mbps Manchester encoder 1434 to receive and 
encode the data and to provide encoded data to the repeater 
module 512 on a respective one of the four PDI1-4 signals. 
The Manchester encoder 1434 performs the reverse process 
as the Manchester decoder 1424 to convert NRZ formatted 
data to Manchester encoded data for the repeater module 
512. 

The Manchester encoder 1434 cycles through the RX 
FIFO 1432 until it detects an invalid flag indicating the end 
of the packet. If any of the respective four physical layer 
devices 504 detects a collision, it asserts a respective one of 
the COLl^ signals provided to the Manchester encoder 
1434, which respondingly drives a 10 MHz clock signal on 
a respective one of the four PCI1-4 signals. In the event of 
a collision, the RX FIFO 1432 is held in reset until the 
PCRS1-4 carrier sense and RX_DVl-4 signals are deas- 
serted. The Manchester encoder 1434 ignores data in the RX 
FIFO 1432 in the event of collision and continues to send a 
data bit "1" to the repeater module 512 until the respective 
PCRS1-4 carrier sense signal is deasserted. The repeater 
module 512 sends an alternating jam pattern (10101 . . . ) 
until its receiving port goes idle. Thus, valid encoded data is 
present on corresponding PDI1-4 signals only for those 
ports that have a corresponding valid LINK1-4 signal and 
PCRS 1-4 carrier sense signal asserted. 

In a similar manner as described above for the TX FIFO 
1426, the 10 MHz RX_CLK signals provided through the 
MUX 1430 are not in phase with the CLK20 signal, and the 
frequencies may vary significantly with respect to each 
other. This is especially true since each of the RX_CLK 
signals are passed through the logic of the MUX 1430. Thus, 
the MUX 1430 and the Manchester encoder 1434 may vary 
by up to 2-3 bits for a full Ethernet packet. When the 
Manchester encoder 1434 detects first valid data in the RX 
FIFO 1432, it waits at least one bit-time or approximately 
100 ns and then begins to encode the NRZ formatted data in 
the RX FIFO 1432 to Manchester format, and writes the data 
to the PDIl^ signals. The delay is between 3-4 bit times or 
300-400 ns before encoding is completed. The RX FIFO 
1432 includes 6 bits to ensure that data is not lost in the event 
either side is faster or slower by 2-3 bits with respect to each 
other for a given packet. 

The repeater module 512 includes an internal memory 
505 for storing statistics of each port via the port connectors 
502 operating at 10 Mbps. In particular, the repeater module 
512 tracks, updates and maintains each of several statistics 
for each port coupled to a 10 Mbps device and stores the 
statistics in the memory 505. The repeater module 514 is 
coupled via a management bus 550, described below, to a 
memory 519 for storing statistics of each port via the port 
connectors 502 coupled to and operating at 100 Mbps. The 
repeater module 514 tracks, updates and maintains each of 
several statistics for each port coupled to a 100 Mbps device 
and stores the statistics in the memory 519. The types of 
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statistics stored include the number of readable frames, and 547, respectively, for coupling to the management 
readable octets, collisions, short events, runt frames, very portion 112b of the backplane bus 112 The MIC 510 is 
long events frames too long, late events, frame check further coupled to an Electrically Erasable Programmable 
sequence (FCS) errors, frame alignment errors, data rate ROM (EEPROM) 524 and to a Non- Volatile RAM 
mismatches, total errors, last source address, source address 5 (NVRAM) 526, and interfaces to the daughter board con- 
changes, auto-partitions, dropped events, coding errors, nector 314. The MIC 510 generally provides management 
isolates, etc. Of course, this list is not intended to be access to the various resources and modules of the repeater 
exhaustive as many other types of statistics may be tracked 102 via the management bus 550. A COM port connector 
and stored as desired. Also, as further described below, 530 including RS-232 connections to the daughter board 
similar statistics are tracked at the repeater level and unit 10 connector 314 provides the serial port 114 for basic out-of- 
level. Although each repeater module 512, 514 includes a band management and configuration functions. The serial 
separate memory device, it is understood that a single port 114 is used for several purposes, including pre-boot 
memory device could be used instead. PoW er On Self Test (POST} messages, boot messages 

A switch device module 516 corresponds to each of the VT100 emulated terminal management via direct 
switching devices 102c-110c, and is preferably the 15 connection, SNMP and Telnet management via SLIP, firm- 
Macronix MX98201 10/100 self-learning bridge. The switch ware update via XMODEM transfer, etc. The serial port 114 
device module 516 includes a 100 Mbps port coupled to an may thus be used for "out-of-band" management purposes 
Mil MAC port of a 100 Mbps repeater module 514 and a 10 for interfacing a management console via the management 
Mbps port coupled to a Reversible-AUI (RAUI) port of the platform 116. Management is typically performed "in- 
10 repeater module 512 through an ENDEC (Encoder/ 20 band", however, via any one of the ports of the repeaters 
Decoder). The switch device module 516 is preferably 102-110. 

coupled to a 256-Kbyte packet buffer memory 518 for both A 100M local arbiter 515 is coupled between the repeater 
10 and 100 packet data. The packet buffer memory 518 is module 514 and the daughter board connector 314 for 
split between 100 and 10 Mbps segments at a default of 15:1 arbitrating access between the 100 Mbps segments of the 
ratio, but is programmable to a 7:1 ratio. Broadcast and 25 repeater modules 514 and 614. A 10M local arbiter 517 is 

multicast packets are forwarded in both directions but may coupled between the repeater module 512 and the daughter 

be blocked using MIB objects. The switch device module board connector 314 for arbitrating access between 10 Mbps 

516 is further coupled to a CAM (Content-Addressable segments of the repeater modules 512 and 612 A 100M 

Memory) device 520 via a CAM controller 522. The CAM global arbiter 521 located on the backplane board 302 is 
device 520 is used to store a MAC address table with up to 30 coupled via the backplane connector 310 and to each of the 

511 or 1023 MAC address entries and to perform address expansion connectors 304 for arbitrating all of the 100 Mbps 

lookup. In an unmanaged stack configuration, CAM entries segments of the repeaters 102-110 
are automatically flushed or cleared when the CAM device TX BUS is provided for transmitting information and 

520 becomes full when another new address is received. In data from the repeater module 514 to any one or more of the 

a managed stack configuration the management agent 1302 35 ARICs 506 and to the SUM 402, if provided, and thus to any 

has the option to flush the CAM device 520 when full or not. network devices coupled to the ports PORT 1-PORT 12 

The CAM controller 522 is preferably an FPGA design that operating at 100 Mbps. The RX BUS receives information 

mterfaces the switch device module 516 to the CAM device and data from any one or more of the ARICs 506, the SUM 

j-.aw 1. ^ 402 ifpresent, and also from any other repeaters coupled via 

The CAM controller 522 captures source and destination 40 the repeater portion 112a of the backplane bus 112 where 

MAC addresses from a packet data bus of the switch device the information and data is provided to the repeater module 

module 516. The source addresses (SA) are used for learning 514. The RX BUS is coupled to a 100 Mbps expansion bus 

and purging purposes and the destination addresses (DA) are 540 through transceiver 542. The expansion bus 540 is 

used for filtering purposes. Preferably, only SAs from the 10 coupled through the daughter board connector 314 and the 

Mbps segment are learned; SAs from the 100 Mbps segment 45 backplane board connector 310 to four sets of transceivers 

are not learned. In particular, a SA of a packet from the 10 544. Each of the transceivers 544 is coupled to a corre- 

Mbps segment invokes a learning task for storing the SA if sponding one of the backplane connectors 304 for coupling 

not already stored, and an SAoi a packet from the 100 Mbps to the repeater portion 112a of the backplane bus 112 As 

segment invokes a purging task. For example, if the SAfrom described previously, the backplane connectors 304 are 

a 100 Mbps packet matches an entry in the CAM device 520, 50 coupled to other repeaters, such as the repeaters 104-110 

the entry is purged since it is no longer on the 10 Mbps via corresponding cables 306 forming the physical embodi- 

segment. If a DA from a packet from the 10 Mbps segment ment of the repeater portion 112a of the backplane bus 112 

matches an entry in the CAM device 520, the packet is local In this manner, the repeater module 514 is coupled to the 

and not forwarded to the 100 Mbps segment. Otherwise, the backplane bus 112 and is part of a single 100 Mbps collision 

CAM controller 522 indicates to the switch device module 55 domain between the repeaters 102-110 
516 to forward the packe t to the 100 Mbps segment. If a DA FIG. 6 is a more detailed block diagram of the daughter 

from a 100 Mbps packet matches an entry in the CAM board 316 of the managing repeater 102. The daughter board 

device 520 the switch dev 1C e module 516 forwards the 316 also includes twelve port connectors 602 coupled to 

packet to the 10 Mbps segment. Otherwise, the 100 Mbps PHY devices 604, which are further coupled to three ARICs 

packet is not forwarded to the 10 Mbps segment. 60 606 in a similar manner as described above for the managing 

The management bus 550, which includes control, base board 312. The ARICs 606 are preferably implemented 

address and data signals, is coupled to the 10 and 100 Mbps in a similar manner as the ARICs 506, described above The 

repeater modules 512, 514, the switch device module 516, twelve ports are also labeled PORT 1-PORT 12 on the 

the CAM controller 522 and the MIC 510. The management daughter board 316, although these ports are re-mapped as 

bus 550 is also coupled to the four backplane connectors 304 65 ports PORT 13-PORT 24 on the repeater. The PHY devices 

via the daughter board expansion connector 314, the back- 604 arc further coupled to another MIC 610 via another 

plane board connector 310 and sets of transceivers 545, 546 MDC/MDIO bus 608, and the ARICs 606 arc each coupled 
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to another 10 Mbps repeater module 612 and another 100 5 via transceivers 544 Thn* th*> py tjitc i* ~ 

Mbps repeater module 614 on the daughter board 316. T*e iqJSrTS^ ?S££2£ 

repeater modules 612, 614 are configured in a similar portion 112a of the backplane bus 112 Alio the 

manner as the repeater modules 512, 514, respectively. TTie ment bus control, address* and daTa sknals^f he manale 
repeater module 612 trada 10 Mbps statistics of the ports 5 ment portion 112* of the backplane to 112 °«e ^coupled to 

via the port connectors 602 when operating at 10 Mbps and the local MICs 710, 810 of thTmanag^abie ^ba^S and 

mc ludes an interna memory 605 for storing the 10 Mbps an "unmanaged" daughter board vialansceivtrs 7^ 746 

statistics in a similar manner as described above for the and 747, respectively, and a management bus 750*111" 

repeater module 512 and the memory 505. Also, the repeater management bus 750 is considered an extension of the 
module 614 tracks 100 Mbps statistics of the ports via port 10 management bus 1300 of the managing repeater 102 in a 

connectors 602 when operating is at 100 Mbps. The repeater stacked configuration via the management portion 112b of 

module 614 is coupled to a memory 619 via a management the backplane bus 112. A 100M local arbiter 715 is coupled 

bus 650 for storing the 100 Mbps statistics in a similar between the repeater module 714 and the daughter board 

manner as described above for the repeater module 514 and connector for arbitrating access between 100 Mbps ports of 
the memory 519. Although each repeater module 612, 614 15 the repeater modules 714 and 814. 

includes a separate memory device, it is understood that a The repeater modules 712, 714 are configured in a similar 

single memory device could be used instead. Further, a manner as the repeater modules 512, 514, respectively The 

single memory device may be used rather than all of the repeater module 712 tracks 10 Mbps statistics of associated 

memories 505, 605, 519 and 619 as desired. ports via port connectors 702 when operating at 10 Mbps 
The MIC 610 is coupled to another EEPROM 620 and to 20 and includes an internal memory 705 for storing the 10 

the 10 and 100 Mbps repeater modules 612, 614 via the Mbps statistics in a similar manner as described above for 

management bus 650 on the daughter board 316 in a similar the repeater module 512 and the memory 505. Also, the 

manner as previously described. The management bus 650 is repeater module 714 tracks 100 Mbps statistics of the ports 

an extension of the management bus 550 on the managing via the port connectors 702 when operating at 100 Mbps 
base board 312 through the daughter board connectors. The 25 The repeater module 714 is coupled to a memory 719 via the 

management buses 550, 650, 750 and 850, described below, management bus 750 for storing the 100 Mbps statistics in 

and the management portion of the backplane bus 112b are a similar manner as described above for the repeater module 

all part of and extensions of a general management bus 1300 514 and the memory 519. 

£2£" 13) .° f thC n T? rk SyStem m ^ mana gement bus FIG. 8 is a more detailed exemplary block diagram of the 
13W is ako extended via the MICs 510, 610 and similar 30 unmanaged daughter board of a manageable repeater, such 

MICs 710 and 810 described below. It is noted that the as any one of the repeaters 104-110. An unmanaged daueh- 

daughter board 316 does not include another switch device ter board is similar to a managing one except excluding The 

module 516. Instead, the 10 and 100 repeater modules 612, management engine 616 and corresponding management 

614 are coupled to the switch device module 516 on the functions. The unmanaged daughter board also includes an 
managing base board 312 via the repeater modules 512, 514 35 RX BUS expanded to the RX BUS of the manageable base 

on the j base board 312 Sana- the daughter board connector 314. board of each manageable repeater via another daughter 

The Reverse Mil (RMII) MAC port of the 100 Mbps board connector via transceiver 842. In this manner the 100 

repeater module 614 is coupled to a 100 Mbps MAC device Mbps segments of the unmanaged daughter boari of the 

in the management engine 616. The management engine 616 repeaters 104-110 are coupled to each other and to the 100 
includes an RS-232 port for interfacing RS-232 signals of 40 Mbps segment of the managing repeater 102 in the same 

the serial port 114 via daughter board connector 314. collision domain via the repeater portion 112a of the back- 

The daughter board 316 includes another TX BUS for plane bus 112. The control, address and data signals of the 

enabling the repeater module 614 to transmit information management portion 1126 of the backplane bus 112 are 

and data to the ARICs 606 and thus to the ports PORT coupled to the MIC 810 via a daughter board connector and 
13-PORT 24, The daughter board 316 further includes 45 a corresponding extension management bus 850 in a similar 

another RX BUS coupled between the repeater module 614, manner as described previously for the managing repeater 

the ARICs 606 and a 100 Mbps expansion bus 640 via 102. 

transceiver 642. The RX BUS of the daughter board 316 is The repeater modules 812, 814 are configured in a similar 

thus an extension of the RX BUS of the base board 312 of manner as the repeater modules 512, 514 respectively The 
the managing repeater 102. The expansion bus 640 is 50 repeater module 812 tracks 10 Mbps statistics of associated 

coupled to the expansion bus 540 via the daughter board ports via port connectors 802 when operating at 10 Mbps 

connector 314. In this manner, data and information trans- and includes an internal memory 805 for storing the 10 

milted to the repeater 102 via the network portion 112a of Mbps statistics in a similar manner as described above for 

the backplane bus 112 is provided to the repeater module the repeater module 512 and the memory 505 Also the 

614 in a similar manner as described above for the RX BUS 55 repeater module 814 tracks 100 Mbps statistics of the ports 

of the repeater module 514. v ia port connectors 802 when operating at 100 Mbps The 

FIG. 7 is a more detailed exemplary block diagram of the repeater module 814 is coupled to a memory 819 via the 

"manageable" base board and the "slave" backplane board management bus 850 for storing the 100 Mbps statistics in 

of a manageable repeater, such as any one of the repeaters a similar manner as described above for the repeater module 

104-110. The base board of a manageable base board is 60 514 and the memory 519. 

similar to that of a managing base board excluding the Each of the manageable units 104-110 includes an exter- 

NVRAM 526. The slave backplane board of a manageable nal MASTER/TARGET switch to reverse the sense of 

repeater includes only one backplane connector 304. The backplane arbitration. In a managed stack configuration 

manageable base board includes a similar RX BUS that is including a managing unit, such as the repeater 102 the 

expanded via the slave backplane board to the expansion 65 MASTER/TARGET switch of each of the manageable 

connector 304 via transceivers 744 in a similar manner as repeaters 104-110 is set to TARGET Two manageable units 

described above for the managing base board shown in FIG. such as repeaters 104 and 106, may be coupled together with 
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a single cable 306 coupling the backplane connectors 304 indicated by the color (green or yellow) and flash frequency 

tId UDm u na f StaC ^ c ? nfl 8 UI » ,K > n - "n* MASTER/ (blinking or not) of the STATUS LED Further details are 

lAKUfcl switch of one of the manageable units in the provided in Appendix A. 

unmanaged stack configuration is set to MASTER and the A 10 COL LED indicate* mliu;„nc ™ it,, m 

other is set to TARGET. Setting the MASTER/TARGET s t^^l^SiS^ZZSla^f^Si 

jtchtoMASTEReffectivelyenablesthelOOMarbiterTlS Mops segment. A^iffiSTrtfiS 

WMGeSS 'o vSaS^J^tSS r rnal r i,Chd . eVice ^'e516isenabledordSdand 
«i r . 1 switch to TARGET disables the 100M also indicates the operation status of the switch device 

^^^^^•^o^^o'^m"^- module 516. A 100 BP LED indites 12n oTr 

suck ™n£^n ^ aUOn 1D Unmana 8 ed to Nation from a common 100 Mbps backplane, such as the 

^Tr o -, A u, , , , repeater portion U2a of ,he backplane bus 112. A 10MB 

Mir on" 5 \ T,°n C u u'^™ °, f ,M h ° f * e LED indicates that the mode and status of the ports operating 

MICs 510 and 610, where each of the MICs 510, 610, 710 at 10 Mbps are displayed by the LEDs 1202 of the respectivf 

and 810 are similar to each other for both the managing and ports operating at 10 Mbps. In particular, if the 10MB LED 

manageable repeaters. The MIC 510 is briefly described J5 is on or green, then the LEDs 1202 display the status of 10 

K«r D « « I S^ m J a SirnUar,y a PP licable to Me Mb P s connections. The LEDs 1202 of those ports either not 

MICs 610, 710 and 810. The MIC 510 includes a Serial connected or not operating at 10 Mbps remain off A 100MB 

Management Interface Controller (SMIC) 902, which pro- LED indicates that the mode and status of the ports operating 

vides control of base and daughter board PHY devices at 100 Mbps are displayed by the LEDs 1202 of the nont 

through Mil SMIC to PHY device registers. The SMIC 902 20 operating at 100 Mbps. In particular, if the 100MB LED is 

also provides for non-volatile storage of up to eight register on or green, then the LEDs 1202 display the status of 100 

values per PHY device in serial EEPROM with an additional Mbps connections. An ALT LED indicates an alternating 

eight register values available for broadcasts. The MIC 510 mode, where the 10MB LED and 100MB LED are alter 

r^T n C m? SmU *, C ° nU ^ l 0gi ° f0f Light EmiUing nate 'y ,urned 00 and off 10 alternately indicate the status of 

Diodes (LEDs) provided on each of the repeaters 102-110. ^ the 10 and 100 Mbps ports 

For example, the MIC 510 1 includes 10/100 switch LED An ACT LED on the SUM 402 indicates whether link is 

status condmomng logic 904, 10M repeater LED interface activ e and whether there is activity on th *uplS ™rt 503 

I^IATT 1 ? 'r™"*, 998 ?* LED controI A COL LED on the SUM 402 indicates cS^LlL 

25nJ?ff™:lSRS~" and componen,s " „ 2S!^ w ^ tetasUM «^^p«» 

FIG. 10 is a more detailed block diagram of the manage- Several switches are also provided on the front panel A 

meat engme 616 of the repeater 102. The primary module on push button MODE switch is used for display mode to force 

the management engine 616 is a processor 1002, which is either the 10, 100 or alternating display modes described 

preferably an 80386 EX central processing unit (CPU) by above.AlO/lboiOO^Yrota^swS L^to stSnt 

MAr^ e t r D , age nn ^ 6 } 6 Pt f^l mdude ** 35 fllSt P ort ' P0RT int ° 10/100 or force 10 1 Mbps 
MAC identification (ID) memory device 1004 thatstores the mo de. When set to 10 ONLY, PORT 1 is forced to operate 
MAC address for the managing repeater 102. The ^single only at 10 Mbps and when set to 10/100, PORT 1 allows 
MAC address is used by the management agent 1302 (FIG. auto-negotiation to either 10 or 100 Mbps just like the other 
f } * r/^ g f * configurate as the physical address ports . An MDIX/MDI rotary switch configures the port for 

for the MAC device for m-band management communica- «, MDIX or MDI pinouts for switching the TX and RX signals 
tions. The management engine 616 is coupled to the man- when set to MDIX, PORT 1 uses the MDIX pinout and may 
agement bus 1300 of the network system 100 via the be connected directly to a NIC. When set to MDI, PORT I 
management buses 650 and 550 and the management por- uses the MDI pinout so that PORT 1 may be used as a 10 
ion 112b of the backplane bus 112 as previously descnbed. Mbps uplink port. The face plate of a manageable repeater, 

In this manner the management engine 616 provides man- 45 suc h as the manageable repeaters 104-110 is similar to tha 
agement functions for all of the repeaters 102-110 of the s h 0W n in FIG 12 excent exdi.Hfno ,hT rnw iZT 7 
network system 100. 530 °' CXCept excludlD 8 ,ne C0M P ort connector 

Although not shown in FIG. 10, the management engine Referring now to FIG. 13, a block diagram is shown of the 

616 includesa Management Engme ControUer (MEC) 1100. managing repealer 102 aiustraling the 8 managein e nt ag6nt 
FIG. 11 .s a block diagram of the MEC 1100. Many other 50 1302, the management bus 1300 and management functions 

togic, circuits and components are provided on the manage- FIG. 13 shows, in simplified form, the firct segment 102a 

meat engme 616 and the MEC 1100 but they are not and the memories 505, 605 of the repeater modules 512 

described as they are not necessary for a full understanding 612, the second segment 1026 and the memories 519 619 of 

of die present invention. the repeater modules 514 m and ^ switch ' device 

front V16W of ,ne fa ce plate of the physical 55 module 516 coupled between the repeater modules 512 and 

housing of a managing repeater, such as the repeater 102. 514. The management agent 1302 accesses the 10 and 100 

The 24 port connectors 502 for each of the ports PORT repeater modules 512, 514, 612 and 614 and their corre- 

1-PORT 24 are shown in two rows of twelve, twelve each spending memories 505, 519, 605 and 619 for purposes of 

tor the base and daughter boards previously described. Each management and control via the management bus 1300 and 

port includes a status LED 1202 above the corresponding so the MICs 510, 610. The management agent 1302 further 

port connector. Each of the LEDs 1202 provide LINK status, accesses the 10 and 100 repeater modules 712, 714 and 812 

activity status or whether the port is partitioned or disabled. 814 and their corresponding memories 705 719 805 and 

The COM port connector 530 is shown along with an RJ-45 819 of each of the manageable repeaters 104-110 included 

connector 1204 for the uplink port 503. A POWER LED in the stack via the management bus 1300. As described 

indicates whether power supply 404 is providing power to 65 previously, the management bus 1300 couples the manage- 

the repeater, and a STATUS LED indicates the general status mcnt buses 550, 650, 750 and 850, the MICs 510 610 710 

of the repeater. One or more failure or fault conditions arc and 810, the transceivers 545, 546 and 547 and co'rrcspond- 
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ing ^.transceivers 745, 746 and 1 747 and the management (OID), which comprises a sequence of integers for travers- 
port.cn 1126 of the backplane bus 112. In this manner, the ing the successive nodes of the tree structure. Each Z, 
management agent 1302 has access to all of the segments has a syntax type which bv the SMI Km,*,,,* „f m„„ 
Ufa-110. and 1026-1106 of the network system foO via agemen. InfoZ^t^VL^ tK^rsa cl s 
the management bus 1300. Furthermore, the management 5 including integers, octet string, null, object identifier and 

platform 116 is able to mon.tor and manage the network sequent. Other allowable data types are defined ncludlne 
system 100 includmg all nodes coupled thereto, if desired. ipAddress, Counter32, Gauge32, TimeTicks Onaaue 

The management agent 1302 manages and controls each Cb Un ter64 and Unsigned32. The SMI identified the dafa' 

of the ports of each of the repeaters 102-110 in the network ,y pes , h a, may be used in a MIB and how resources are 

system 100 in a unified manner. Unified treatment occurs r,L„ nto j n a a ■ .u , ~i resources are 
even though each port of any given repeater maToperTa! 10 SS^ff u k ^ ^ may be multiple 

10 Mbps when coupled to the first segment and at 100 Mbps T °f " ^ ° bjCCt 1DStance also has a value - 

when 'coupled to the second segment. TOs enables a^ ^fY^ ^ ° f ma > have a ^ 

external managing device, such as a management console of °: . ° bjeC c l ° r a 561 of objecls defines the status and 

the management platform 116, to manage each of the ports cnaracte nstics of a network resource. Aresource manager or 
in a unified manner regardless of the particular protocol or 15 mana g ement console, such as within the management plat- 
is transmission rate and regardless of whether in-band or 116, monitors tne status °f the resources by reading the 

out-of-band. As further described below, statistics are gath- values of the objects and controls the resources by changing 

ered for each port when operating at either transmission rate. tne valucs of the objects via a management agent, such as the 

In response to a "unified" statistics request, a unified statistic management agent 1302. The management information 
is provided that reflects combined operation at both trans- 20 includes control, status, statistics, security, identification, 

mission rates. The statistics request may specify transmis- etc - anQ< information, such as packet counts, error counters,' 

sion rate, in which case the management agent 1302 pro- time counters, IpAddresses, etc. 

vides statistics specific to the requested transmission rate The management platform 116 monitors and manages the 

rather than a unified statistic. As further described below, network system 100 by sending SNMP requests or the like 

port intrusion detection and/or intrusion prevention is sup- 2S to the management agent 1302 via a management interface 

ported in a unified manner If an unauthorized node or (I/F) 1320, where the management agent 1302 accesses one 

station attempts to transmit to a port, that port is shut down or more of the M1Bs M1 _ S M5 {Q ^rfcvc « SSTmS 

regardless of the media standard or transmission rate of the objects , or t0 olnerwise retrieve info ™to^SS5S 

intruder or of a subsequent network device. Such unified MI J B objects . ^ e management T/F ™s ^ 

management enables the management unit to manage or 30 ports of J tne repcaters J 2 _ m ^ 

control all of he ports of the network system in a unified me Mriil port { u for outK)f . baQd mS^^^SaSlP 

manner regardless of trar^ission rate or media standard. request ^ one or more QIDs 

The management agent 1302 is preferably implemented 0 f interest. For example, the management platform 116 

as firmware stored in memory within the management sends a "GET" "GETNTFXT" or «v:pt» „ tk 

engine 616, such as a ROM, FLASH ROM, £ and 35 ^^6 t S^SZ^^^^ 

executed by a local processor, such as the processor 1002. accesses one or more of the MIBs Mi-Mi i and responds by 

The management agent 1302 accesses, controls and main- reading or modifying information corresponding to one or 

tains at least one MIB which is a database containing mor e objects identified by the OIDs in the MIBs according 

information about the elements to be managed ,n the net- to the specific operation. The GET operation is used to read 

work system 100. A MIB is a definition of a structured ^ a value corresponding to an object identified by an OID and 

collection of objects representmg one or more nodes, the GETNEXT operation is used to read a value correspond- 

devices, resources, etc. of a network to be managed, con- ing to the next object or "leaf in the MIB tree referenced by 

trailer or otherwise monitored. The objects in a MIB are , given OID. The SET operation is used to modify a value 

ordered in a hierarchical tree structure, typically denned corresponding to an object identified by an OID. A TRAP" 

with the ASN.l (Abstract Syntax Notation one) standard, 45 operation is similar to an interrupt, where if an object or the 

which is a formal language for defining abstract syntax of va i ue corresponding to an object changes, the management 

fS-Mm i Mm 3 , ^t™ p ? m™"^ agCOt 1302 responds by a n °^ ca,ion 10 ^ »»- 

including MIB-I, MIB-II, Host MIB, Bridge MIB, Hub agemeni platform 116 

MIB, RMON MIB, among others. Each of the resources or Each o£ , he ler modu|es $u su m fi 
network devices such as computer systems or nodes, 50 714> 812 and 8 l 4 of each of the repeaters 102-UO tracte and 

switches, routers, brouters, bridges, repeaters, hubs, etc. in a s(ores statistics fof each Q P { J to ,h" Se in 

ne work may have a standard and/or enterpnse-specific corresp onding memories 505, 519, 605, 619 705 719 805 

MIB(s) for management purposes. and gl9 „ previous , y described ^ m ' — « 

The repeaters 102-110 and the management agent 1302 n 6 sends a request including an OID identifying an object 
support several MIBs including the standard Ethernet™ 55 within any one of the MIBs M1-M5 to the repeater 102 .0 

f^ 8 h f m p ^£ ™ mP T , I"* 5 10 Kqwst fafor ™tion or antics corresponding to that object. 

1516, the MIB II (M2) 1312 implemented according to RFC The management agent 1302 responds by accessing the 

213, the Remote Network Monitoring (RMON) MIB (M3) mera ory associated with one or mL of the «p«ter mod! 

l 3 4 A m f le " d ^f'" 8 '° RF F the Ethernet .™ ules of lhe re P ea '^ 102-110 and provides the requested 

•^?,5Z J££ ffil } i ? ™ e ^ tCrpnSe 60 informat i0" t° the management platform 116. Depending 

specific MIB (MS) 1318, which is a private MIB designed upon the requested information and the MIB, the informa 

specifically for the network system 100. The repeater 102 tion may be "unified" for both the 10 and 100 repeater 

and the management agent 1302 may also support other domains or the information may be specific to either If the 

standard or non-standard MIBs designed for Ihe network information is one or more unified statistics, the manage- 

system 1W) ,..„„... « rnent agent 1302 typically combines the statistics from the 

Each of the objects in the MIBs M1-M5 is accessed or 10 and 100 Mbps repeater modules of a repeater unit and 

otherwise referenced using a corresponding object identifier provides the combined number or unified statistic to the 
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management platform 116. The unified statistic is typically 
achieved by summing the corresponding values together for 
a total count for the corresponding statistic. It is contem- 
plated that values may be combined in other manners, such 
as subtraction, multiplication, division, etc. Otherwise, the 
information is retrieved from a specific repeater module. In 
this manner, the management platform 116 may ask for port 
information including statistics in one of three different 
ways: 10 only, 100 only or a summation of both. 

For example, a VALID FRAME COUNT is a number that 
is tracked, maintained or updated and stored by each 
repeater module 512, 514, 612, 614, 712, 714, 812 and 814 
identifying the number of frames (or packets) of valid frame 
length that have been received at a given port associated 
with a particular repeater module. A given port, however, 
may be coupled to a 10 Mbps device, a 100 Mbps device, or 
may have been coupled to both sequentially during opera- 
tion. The latter case would occur if a 10 Mbps device was 
coupled to a given port for a period of time and removed, 
and then a 100 Mbps device was coupled to that same port 
for another period of time. The 10 Mbps repeater module 
tracks the 10 Mbps statistics of the first device and the 100 
Mbps repeater module tracks the 100 Mbps statistics of the 
second device for that port. Thus, any given single port may 
have statistics for both. One or more of the MIBs of the 
repeater 102 includes a corresponding object indicating the 
number of valid frames. However, the object may be unified 
for both the 10 and 100 segments or may be specific to 
either. 

The management platform 116 sends a statistics request to 
the management agent 1302 that includes an OID identify- 
ing the object of a MIB to request the number of valid frames 
received by a particular port. If the object or the MIB is not 
unified, then the request indicates the particular repeater of 
interest, whether the 10 or 100 statistics are desired and the 
port number. For example, the request may include a device 
parameter indicating the particular repeater module, a rate 
parameter indicating 10 or 100 and a port parameter indi- 
cating any one of the 24 ports PORT 1-PORT 24. The 
management agent 1302 responds by retrieving and provid- 
ing the corresponding VALID FRAME COUNT from the 
corresponding repeater module. If, however, the object is 
unified, then the management agent 1302 responds by 
retrieving the VALID FRAME COUNT from both the 10 
and 100 repeater modules, combines the two numbers such 
as summing the numbers together, and provides the sum to 
the management platform 116. 

The MIB 1310 includes a corresponding "rptrMonitor- 
PortReadableFrames" object indicating the number of valid 
frames for each of the ports. The OID of the request is, or 
otherwise corresponds to "rptrMonitorPortReadable- 
Frames" if the MIB 1310 is intended for the request. If ten 
(10) valid frames have been received from a 100 Mbps 
device and if five (5) valid frames have been received by a 
10 Mbps device at the same port PORT2 of the repeater 102, 
then the memory 505 of the repeater 102 stores a value of 
five (5) and the memory 519 stores a value of ten (10). The 
management platform 116 sends a request to the manage- 
ment agent 1302 that includes an OID identifying the 
rptrMonitorPortReadableFrames object of the MIB 1310 to 
request the number of valid frames received by PORT 2 of 
the repeater 102. The management agent 1302 responds by 
retrieving the VALID FRAME COUNT number from both 
of the repeater modules 512 and 514, sums the numbers 
together resulting in fifteen (15) valid frames, and provides 
the sum value to the management platform 116. 

The MIB 1318 includes an extended port information 
table having a table entry corresponding to each statistic for 
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each port defined in the network system 100. An INDEX is 
defined for each entry including a UNIT ID parameter 
identifying the particular repeater 102-110, a RPTR ID 
parameter identifying either the 10 or 100 repeater module, 
and a PORT ID parameter identifying a particular port. 
Suppose the UNIT IDs of the repeaters 102-110 are 1-5^ 
respectively, the RPTR ID is "10" for a 10 Mbps repeater 
module and is " 100" for a 100 Mbps repeater module and the 
PORT ID is 1-24 for ports PORT 1-PORT 24, respectively. 
The MIB 1318 also includes an object 
"n2feExtPortReadabIeFrames" corresponding to the number 
of valid frames received at a port. The management platform 
116 sends a request with an OID = 
"nlfeExtPortReadableFrames" with parameters UNIT ID, 
RPTR ID and PORT ID identifying the particular repeater! 
the repeater domain and the port, respectively. The manage- 
ment agent 1302 returns the corresponding statistic number 
to the management platform 116. 

For example, if the management platform 116 sends a 
request with an OID-"n2feExtPortReadableFrames" with 
parameters UNIT ID-1, RPTR ID-100 and PORT ID-2 for 
PORT 2 of the repeater 102, and assuming the same frame 
count numbers of 10 and 5 as described above, the man- 
agement agent 1302 returns a value of ten (10) to the 
management platform 116 for the repeater module 514. If, 
however, the management platform 116 sends a request with 
an OID«"n2feExtPortReadableFrames" with parameters 
UNIT ID-1, RPTR ID-10 and PORT ID-2 for PORT 2 of 
the repeater 102, then the management agent 1302 returns a 
30 value of five (5) to the management platform 116 for the 
repeater module 512. 

Table 1 below lists several statistics that are tracked and 
maintained at the repeater stack-level for two of the MIBs 
Ml 1310 and M4 1316: 
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ReDeatcr Module- Level Statistics bv MIB 


Repeater Module-Level Statistic 


MIB Ml 1310 MIB M4 1316 


Total Octets 


✓ 


Total Partitioned Ports 




Transmit Collisions 


✓ ✓ 


Jabbers 





Table 2 below lists several statistics that are tracked and 
maintained at the unit (or repeater unit 102-110) level for the 
MIBs Ml 1310, M3 1314, M4 1316 and M5 1318: 
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Unit-Level Statistic 

Total Frames 
Total Octets 
Total Errors 
Up-time 
Dropped Events 
Broadcast Packets 
Multicast Packets 
FCS and Alignment 
Errors 

Undersized Packets 

Runts 

Fragments 

Collisions 

Oversized Packets 

Jabbers 



Unit-Level Statistics bv MIB 

Ml 1310 M3 1314 M4 1316 M5 1318 



/ 
/ 
/ 



/ 
/ 
/ 



/ 
/ 



/ 
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TABLE 4 



Unit- Level Statistic 



Unit-Level Statistics bv MIB 

Ml 1310 M3 1314 M4 1316 M5 1318 



MIB 



Late Events 
Very Long Events 
Data Rate Mismatches 
Packets 0-64 Octets 
Packets 65-127 Octets 
Packets 65-127 Octets 
Packets 128-255 Octets 
Packets 256-51 1 Octets 
Packets 512-1023 Octets 
Packets 1024-1518 
Octets 
Utilization 



Traps Supported fay t he Mana g ement Agent 1302 
Trap RFC1157 Trap Type variable Bindings 



/ 
/ 
/ 
/ 
/ 
/ 
S 



/ 
/ 
/ 



RFC1157 
(SNMP 
Specifica- 
tion) 



RFC1757 
(RMON) 



Table 3 below lists several statistics that are tracked and 
maintained at the port level for the MIBs Ml 1310, M3 
1314, M5 1318 and for the VT100 emulation by the man- 
agement platform 116: 



Cold coldStart(I) 
Start 



Authen- authenticatioaFailure 

tica- (4) 

tion 

Failure 

Rising enterpriseSpecific(6): 

Alarm rmon.l 



Falling enterpriseSpccific(6): 
Alarm rmon.2 
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TABLE 3 



MIB 1 1310 
(RFC 1516) 



Port- Level Statistics bv MIB and VTinn 


vnoo 


Port-level Statistic 


Ml 1310 


M3 1314 


M5 1318 


Readable Frames 


/ 


/ 


/ 


/ 


Readable Octets 


/ 


/ 


/ 


/ 


Collisions 


✓ 


✓ 


✓ 


/ 


Short Events 




/ 


✓ 


/ 


Runt Frames 


✓ 


/ 


/ 




Very Long Events 


/ 


/ 


/ 


/ 


Frames Too Long 


/ 


✓ 


/ 


/ 


Late Events 


✓ 


/ 


/ 


FCS Errors 




S 


/ 


/ 


Frame Alignment Errors 


✓ 


✓ 


/ 


/ 


Data Rate Mismatches 




/ 


✓ 


/ 


Total Errors 


✓ 


s 




Last Source Address 


/ 


s 


✓ 


/ 


Source Address Changes 


/ 


s 


/ 


/ 


Auto-partitions 


/ 


s 


/ 


/ 


Dropped Events 






/ 




Coding Errors (100 Mbps) 






/ 




Isolates (100 Mbps) 






/ 





(none) 



(none) 



alarmlndex, 
alarmVariablc, 
alannSampleTypc, 
alarm Value, 
alarmRisingThreshold 
alarmlndex, 
alarm Variable, 
alarmSamp leType, 
alarm Value, 
alarmFallingThreshold 
rptrOperStatus, 
rptrHcalthText 
rptrGroupIndex 
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MIB 4 1316 
(Novell) 



Health enterpriseSpecific(6): 

snmpDot3RptrMgt.l 
Group enterpriseSpecific(6): 
Change snmpDol3RptrMgt.2 
Reset entcrpriscSpeciflc(6): rptrOperStatus 

snmpDot3RptrMgt.3 
Health enterpriseSpecific(6): 

nSnmpDot3RptrMgt. 1 
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Group enterpriseSpecific(6): 
Change nSnmpDot3RptrMgt.2 
Reset enterpriseSpecific<6): 
nSttmpDot3RptrMgt,3 



rptrBasHealthStale, 
rptrBasHealthText, 
rptrBasHealthData, 
rptrBasID, rptrExtName 
Rp trBasGroup Map, 
rptrBasID, rptrExtName 
rptrBasHealthState, 
rptrBasHealthText, 
rptrBasHealthData, 
rptrBasID, rptrExtName 
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The management agent 1302 informs the management 
platform 116 of certain predetermined events that occur in 
the network system 100 using SNMP traps. Traps are 
analogous to interrupts used by processors in computer 
systems, and are often used to indicate unusual events or 
exception conditions. Examples of such events include 
system crash and reboot, reset, starting conditions 
(coldStart, warmStart), failure of a port or link (linkDown, 
linkUp), an overload condition determined by a threshold 
parameter being violated, etc., and includes enterprise- 
specific events (enterpriseSpecific) which indicates the type 
of trap. The management agent 1302 is configured or 
programmed to monitor one or more parameters, objects, a 
group of objects, etc., and to take an action in response to a 
change of a parameter, object, condition, etc. The response 
often includes informing the management platform 116 of 
the event by sending an unsolicited notification via the 
management I/F 1320. 

Table 4 below summarizes the traps generated by the 
management agent 1302, where the MIB column indicates 
the MIB or RFC that defines the traps, the trap column lists 
the traps by a convenient name, the "RFC 1157 Trap Type" 
column lists the generic trap category of the SNMP speci- 
fication contained in RFC 1157 to which the trap belongs, 
and the ''Variable Bindings'* column lists additional MIB 
objects that arc included in the trap message: 
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60 
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As noted in Table 4 above, the MIBs Ml and M4 each 
include similar traps, where it is desired to use one set or the 
other but not both. Both of the MIBs Ml and M4 include a 
"HEALTH" trap, a "GROUP CHANGE" trap and a 
"RESET" trap, where the specifics of these differ with the 
particular MIB. The HEALTH trap is issued when changes 
occur in a repeater's operational status. A GROUP 
CHANGE trap is issued when a repeater unit is added to or 
removed from the network system 100 stack. The RESET 
trap is issued after completion of a reset condition. The 
GROUP CHANGE trap of the MIB Ml 1310 provides the 
unit number whose status has changed whereas the MIB M4 
1316 provides a 16 -bit bitmap showing which units are 
currently present in the stack. The conditions that cause each 
of these traps are the same, but the trap contents are 
different. Therefore, it is desired to use either the Ml or the 
M4 type traps but not both. 

The MIB M5 1318 is preferably a private or enterprise 
specific MIB that includes the following object definition for 
programming Ml or M4 type traps: 



n2feTrapSupport OBJECT-TYPE 
SYNTAX INTEGER 
{ 

rfcl516-traps-onIy(l) 
novell-traps-only(2) 

ACCESS read -write 
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stored in any convenient manner, such as in the memories 
. -continued 505, 605, 705 or 805 of the repeater modules 512, 612, 712 

STATUS mandatory 

or 812, respectively, and the memories 519, 619, 719 and 

:: - {n2feUnitinfo x} 819 for the repeater modules 514, 614, 714 and 814 

5 respectively. As described above, the authorized MAC 

where "rfclS16" corresponds to the MIB Ml 1310 and address f are ak ° 'Stored in the NVRAM 526 by the man- 
Novell" corresponds to the MIB M4 1316. The management a 8 ement agent 1302. The management agent 1302 also 
platform 116 sends an SNMP SET request to program the e ? ables a ?y ° ne °r more of the repeater modules for intru- 
trap support value to (1) to select the MIB Ml 1310 type Slon mom,orul e- When a port is to be secured by assigning 
traps and to (2) to select the MIB M4 1316 type traps. The 10 a " authonzed MAC address, the management agent 1302 
management agent 1302 receives the request and programs preferably programs and enables both of the 10 Mbps and 
the trap support value corresponding to the object definition 100 Mb P s re P ea 'er modules associated with that port. For 
within the MIB M5 1318. The management agent 1302 then example, to secure PORT 3 of the repeater 102, both of the 
uses the appropriate trap definitions as determined by the repeater modules 512 and 514 are programmed with the 
trap support value. is same MAC address for PORT 3, and both modules are 
A default may be set for the trap support object. For enabled for port intrusion monitoring. Each repeater module 
example, the trap support object may have a default value of that is enabled for port intrusion monitors the source MAC 
(1) to program the traps to the MIB Ml 1310 type. In this address of each packet received on a secured port For 
manner the trap select object is programmed to a value of Ethernet™ packets, the source address is provided within the 
(1) if it is desired that the management platform 116 20 first 12 bytes of the packet. The repeater module then 
RFrT™ " mana S em f nt »PPlj«*on compatible with compares the reccived'source addrj with mekssigned" 
RFC1516 type traps. Alternatively, the trap select object is MAC address for that port. If the addresses matchme 

management platform 116 executes a management the management agent 1302 is informed and the port is 
application, such as Novell's ManageWise™, compatible 25 disabled P 

r^™? E ' h ?T^ M H r Ub „ MIB ' lD ihi& manDer - ** Each of ,he fflodules taf °™« «hc management 
management agent 1302 of the managing repeater 102 agent 1302 of an unauthorized intruder by asserting an 
supports other trap type and definition. Also, the trap interrupt on the management bus 1300 to LTpU 1002 
support value may be stored m the NVRAM 526 if desired executing the management agent 1302. Al ten,atSyT 
nowe del Pr ° grammed V2lUe remamS UQchan S ed duri °g * "^aler module sets\ flag in memory or a regis.™ where 
-ru . lhe Ba S B periodically polled by the management agent 
The management agent 1302 and the MIB MS 1318 1302. In the embodiment shown, the 10 Mbps repute 
support intra.™ detection to detect unauthorized nodes or modules 512, 612, 712 and 812 are configurable to ^ te- 
stations and mtmston prevention to prevent intruders from maticaUy disable the intruded port. The management agent 
transmitting on the network system 100 on any of the ports 35 1302 disables the intruded port of the 100 M^ repute 
of any of the repeaters 102-110. Intrusion is detected modules 514, 614, 714 and' 814. Whence ~S 
regardless of the transmission rate of the node or station agent 1302 is informed of an intruded port, the management 
coupled to a port. Within the MIB M5 1318, each port has agent 1302 disables the port for tte aslSed 2 

an nZtelNTRUSIONPORTSTATUS object indicating the 40 512 detects an intruded port, such as PORT 4, it generates an 

a " '"^P 1 10 '"^ * e dement agent iSifff 

n2fe NTRUSIOWORTMACADDRESS object program- agement agent 1302 then disables the same port PORT 4 for 

mable with an authorized MAC address for that port. The the repeater module 514. Likewise, if the repeater moduk 

!ZrlT D K ? ° nly one authorized MAC 514 detects an intruded port, the management agent 1302 

address to be programmed per port. Alternative embodi- 45 disables the same port for the repeater module 512 

ments allow any practicable number of authorized MAC Based on the foregoing, those skilled in the art now 

addresses to be programmed for each port. If a node or understand and appreciate that the stackable integrated ™Z 

staUon transmits a source MAC address that is not equal to tern described herein is operable with at least ^o different 

the authonzed MAC address, the port is disabled and the baseband signaling specifications that operated Sfferen 

management agent 1302 generates an SNMP "health state" 50 transmission rates. Because the system provided in accor 

trap indicating the intruded port. The intrusion-disabled port dance with the teachings of the present invention reducesThe 

remains disabled until re-enabled by the management plat- total number of components typically used TeS£ 

^iS^O^^^Vf^Tt^f^t ? at t * ransmissions acr °* W«* basebands, i, provide! 
n2feINrRUSIOWORTSTATUS (intrusion status of each higher reliability and cost-effectiveness Because of the 

i:lr£X"?c ,r ^ US ' ONPO K R ™ACADDRESS (the 55 reduction in the components and stackeTconfiSion, h 

S aZ «? f * CSS) V T abl ? S, ,° red It SyS,em provides a desirable iom-hao: Lh that less 
NVRAM 526. In this manner, when the network system 100 space is needed for installation and operation 

or any particular repeater 102-110 resets due to power The stackable integrated system described herein also 

interruption or software download, all of the ports previ- provides for unified management of all of the ports A 

ously disabled via the intrusion feature remain disabled 60 separate set of statistics are kept for each port and for each 

durmg boot phase and after the management agent 1302 transmission rate. A management system responds to statis- 

resumes operation until explicitly enabled by the manage- tics requests by providing statistics for either transmission 

ment platform 116. rate or a combination of botn in the umfied case Intrusion 

o^,^,^,™' 6a , C o^ f i h , e . re P eater raodules de 'ection and prevention are supported on any port in a 

512, 514, 612, 614, 712, 714 and 812, 814 is programmable 65 unified manner. Several standard management databases are 

by the management agent 1302 with an authorized MAC supported. The management system is programmable to 

address per port. The authonzed MAC addresses may be select the traps of any particular non-standard or standard 
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databases, such as the standard Ethernet™ Repeater MIB 
implemented according to RFC 1516 or the Ethernet™ Hub 
MIB by Novell. Intrusion detection is supported for any and 
all ports of all repeater units in a stack regardless of 
transmission rate. 

Although a preferred embodiment of the present invention 
has been illustrated in the accompanying drawings and 
described in the foregoing Detailed Description, it will be 
understood that the invention is not limited to the embodi- 
ment disclosed, but is capable of numerous rearrangements, 
modifications and substitutions without departing from the 
spirit of the invention as set forth and defined by the 
following claims. For example, whereas the functionality of 
a slow first segment, a fast second segment and a switching 
device therebetween may all be implemented in a single 
substrate integrated circuit solution, the respective function- 
ality may also be partitioned to produce a single board-level 
solution. Also, though in the embodiment shown the switch 
device learns the addresses of devices of one segment, it 
could be configured to learn the MAC addresses of the other 
segment or of both segments. Furthermore, although the 
presently illustrated exemplary embodiment of the present 
invention utilizes Ethernet™ technology, those skilled in the 
art will readily appreciate upon reference hereto that the 
teachings of the present invention may be extended to other 
LAN technologies, such as Token Ring™, FOIRL, FDDI 
and the like. 

Also, as has been mentioned earlier, a managed stack 
according to the present invention may be provided with 
additional backplanes, either fast or slow. Nor is it a require- 
ment of the present invention that the stackable fast back- 
plane must match the individual fast segments of the stack- 
able units in the bit transmission rate. It is quite s possible 35 
to provide a Gigabit/second type backplane while the 
so-called fast segments of the units may operate only at 100 
Mbps. The integrated switching functionality of the devices 
of the present invention may be coupled with a routing 
device, giving rise to a "brouter" functionality. It may be 
appreciated that a simple router or a bridge may also provide 
bridging capability. Moreover, a plurality of integrated hubs 
may be provided in accordance 10 with the teachings of the 
present invention wherein each such hub comprises multiple 
segments, each having a different baseband capability. These 
hubs may be disposed in disparate domains and intercon- 
nected in a stackable arrangement via one or more back- 
planes. Accordingly, it is envisaged that all these 
rearrangements, modifications, substitutions and extensions 
are comprehended within the scope of the present invention 
is which is solely limited by the following claims. 

What is claimed is: 

1. A network device with unified management, compris- 
ing: 

one or more ports operable at any one of a plurality of 
media standards; 

port apparatus coupled to said one or more ports that 
monitors and controls said one or more ports for each 60 
of said plurality of media standards, said port apparatus 
receiving at least one authorized address for said one or 
more ports from said management system, wherein said 
port apparatus disables said one or more ports for all of 
said plurality of media standards if an address is 65 
received at said one or more ports that is different from 
said at least one authorized address; and 
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a management system that interfaces said port apparatus 
to manage said one or more ports in a unified manner 
with respect to all of said plurality of media standards. 

2. The network device of claim 1, further comprising: 
a memory; 

said port apparatus maintaining a first set of statistics of 
said one or more ports when operating according to a 
first media standard, that maintains a second set of 
statistics of said one or more ports when operating 
according to a second media standard and that stores 
said first and second sets of statistics in said memory; 
and 

said management system that receives a statistics request 
and that provides at least one corresponding statistic 
from said first and second sets of statistics. 

3. The network device of claim 2, further comprising: 
said management system receiving a statistics request for 

said one or more ports and that provides a correspond- 
ing statistic from said first set of statistics if said 
statistics request indicates said first media standard and 
that provides a corresponding statistic from said second 
set of statistics if said statistics request indicates said 
second media standard. 

4. The network device of claim 3, wherein said statistics 
request includes a rate parameter identifying one of first and 
second transmission rates, wherein said first transmission 
rate corresponds to said first media standard and wherein 
said second transmission rate corresponds to said second 
media standard. 

5. The network device of claim 4, wherein said manage- 
ment system further comprises: 

a database with a table of objects including a set of objects 
associated with said first and second sets of statistics; 
and 

a management agent that receives said statistics request 
with said rate parameter and that provides a corre- 
sponding statistic from said first set of statistics if said 
rate parameter indicates said first transmission rate and 
that provides a corresponding statistic from said second 
set of statistics if said rate parameter indicates said 
second transmission rate. 

6. The network device of claim 4, further comprising: 
said port apparatus maintaining said first set of statistics 

to include statistics for each of said one or more ports 
when operating at said first transmission rate and 
maintaining said second set of statistics to include 
statistics for each of said one or more ports when 
operating at said second transmission rate; 

said statistics request including a port parameter identi- 
fying one of said one or more ports; and 

said management system providing a statistic correspond- 
ing to said one of said one or more ports in response to 
said statistics request. 

7. The network device of claim 2, wherein said manage- 
ment system receives a statistics request for said at least one 
port and respondingly combines statistics from said first and 
second sets of statistics corresponding to said one or more 
ports and provides a unified statistic in response to said 
statistics request. 

8. The network device of claim 7, wherein said manage- 
ment system adds corresponding statistics from said first and 
second sets of statistics to achieve said unified statistic. 

9. The network device of claim 7, further comprising: 
said management system including a database including a 

plurality of objects associated with said first and second 
sets of statistics; and 
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said statistics request including an identifier of at least one 

of said plurality of objects. 
10. The network device of claim 2, further comprising: 
said port apparatus maintaining said first set of statistics 
to include statistics for each of said one or more ports 
when operating according said first media standard and 
maintaining said second set of statistics to include 
statistics for each of said one or more ports when 
operating according said second media standard. 
U. The network device of claim 1, further comprising: 
said port apparatus including a first port module that 
operates according to a first media standard and a 
second port module that operates according to a second 
media standard, wherein said first port module disables 
said one or more ports for said first media standard if 
an address is received at said one or more ports that is 
different from said at least one authorized address and 
communicates to said management system that said one 
or more ports is disabled; and 
said management system controlling said second port 
module to disable said one or more ports for said 
second media standard. 

12. The network device of claim 1, further comprising: 
said port apparatus including a first port module that 

operates according to a first media standard and a 
second port module that operates according to a second 
media standard, wherein said first port module com- 
municates to said management system if an address is 
received at said one or more ports that is different from 
said at least one authorized address; and 
said management system controlling said first and second 
port modules to disable said one or more ports for both 
of said first and second media standards, respectively. 

13. The network device of claim 1, further comprising: 
a nonvolatile memory coupled to said management sys- 
tem; and 
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said management system storing a value in said nonvola- 
tile memory that indicates that said one or more ports *" uvi " wiA «auww system oi ciaim is, wnerein 
is disabled, wherein upon subsequent power cycle, said 40 said . stat ktics request indicates a port and a network resource 
management system accesses said nonvolatile memory de Y 1 5 e ^. 



backplane, receiving a statistics request and providing 
at least one corresponding statistic from one of said 
plurality of network resource devices. 

15. The network resource system of claim 14, further 
comprising: 

said statistics request indicating a port of one of said 
plurality of network resource devices and further indi- 
cating one of said first and second media standards; and 

said management agent receiving said statistics request 
and providing at least one statistic from a first set of 
statistics of an indicated port of said one of said 
plurality of network resource devices if said statistics 
request identifies said first media standard and provid- 
ing at least one statistic from a second set of statistics 
corresponding to an indicated port of said one of said 
plurality of network resource devices if said statistics 
request identifies said second media standard. 

16. The network resource system of claim 15, wherein 
said statistics request includes a port parameter, a device 
parameter and a media parameter. 

17. The network resource system of claim 16, further 
comprising: 

a database with a table of objects associated with said first 
and second sets of statistics and an index for indicating 
a port, a network resource device and a media standard; 
and 

wherein said management agent receives said statistics 
request, applies said port parameter, said device param- 
eter and said media parameter to said index to identify 
a corresponding object and retrieves at least one cor- 
responding statistic. 

18. The network resource system of claim 14, wherein 
said management agent receives a statistics request for said 
at least one port of any one of said plurality of network 
resource devices, combines statistics from said first and 
second sets of statistics and provides a unified statistic in 
response to said statistics request. 

19. The network resource system of claim 18, wherein 



and controls said port apparatus to disable said one or 
more ports for all of said plurality of media standards. 
14. A network resource system with unified management, 
comprising: 

a plurality of network resource devices coupled together 

via a common backplane, each including: 
a memory; and 

said port apparatus maintaining a first set of statistics of 
said at least one port when operating at according to a 
first media standard and maintaining a second set of 
statistics of said at least one port when operating 
according to a second media standard and storing said 
first and second sets of statistics in said memory; 

at least one port; and 

port apparatus that monitors and controls said at least one 
port for each of a plurality of different media standards; 
and 

one of said plurality of network resource devices further 
including a management agent that interfaces said port 
apparatus of each of said plurality of network resource 
devices to manage said at least one port of each 
network resource device in a unified manner with 
respect to all of said plurality of media standards, said 
management agent accessing said memory of each of 
said plurality of network resource devices via said 
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20. The network resource system of claim 14, further 
comprising: 

said port apparatus of each of said plurality of network 
resource devices receiving at least one authorized 
address for said at least one port from said management 
system, and disabling a corresponding port for all of 
said plurality of media standards if an address is 
received at -said corresponding port that is different 
from said at least one authorized address. 

21. The network resource system of claim 20, further 
comprising: 

said port apparatus of each of said plurality of network 
resource devices including a first port module that 
operates according to a first media standard and a 
second port module that operates according to a second 
media standard, wherein said first port module disables 
said corresponding port for said first media standard if 
an address is received at said corresponding port that is 
different from said at least one authorized address and 
communicates to said management system that said 
corresponding port is disabled; and 

said management system controlling a corresponding 
second port module to disable said corresponding port 
for said second media standard. 

22. The network resource system of claim 20, further 
comprising: 
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said port apparatus of each of said plurality of network 
resource devices including a first port module that 
operates according to a first media standard and a 
second port module that operates according to a second 
media standard, wherein said first port module com- 5 
municates to said management system if an address is 
received at said corresponding port that is different 
from said at least one authorized address; and 

said management system controlling said first port mod- 
ule and a corresponding second port module to disable 10 
said corresponding port for both of said first and second 
media standards. 

23. A method of managing a network resource device that 
includes a plurality of ports, each port capable of operating 
at one of a plurality of media standards, comprising: 15 

detecting a network device coupled to any of the plurality 
of ports and determining a compatible one of the 
plurality of media standards; 

operating each port having a coupled device according to 
one of the plurality of media standards; 20 

monitoring and controlling each port having a coupled 
device in a unified manner with respect to all of the 
plurality of media standards; 

receiving an authorized address for at least one of the 25 
plurality of ports; 

receiving a transmission at a port operating at one of the 
plurality of media standards and having an authorized 
address, wherein the transmission includes a source 
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address that is different from the authorized address for 
that port; and 

disabling that port for all of the plurality of media 
standards. 

24. The method of claim 23, wherein said monitoring and 
controlling step further comprises steps of: 

tracking and storing a set of statistics for each port of each 
network device for each of the plurality of media 
standards; 

receiving a statistics request indicating one of the ports; 
combining statistics corresponding to more than one of 
the media standards to achieve a unified statistic; and 
providing the unified statistic. 

25. The method of claim 23, wherein said monitoring and 
controlling step further comprises steps of: 

tracking and storing a set of statistics for each port of each 
network device for each of the plurality of media 
standards; 

receiving a statistics request indicating one of the ports 
and further indicating one of the plurality of media 
standard; 

retrieving a statistic corresponding to the indicated media 

standard according to the statistics request; and 
providing the retrieved statistic. 
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